Lemon 64 and Lemon Amiga sites down after being attacked

[1024MAK]

Unfortunately another community has been subjected to an attack. Both Lemon 64 (for Commodore 64 machines) and Lemon Amiga are down.

On the Spectrum Computing forum, PROSM says:

According to lifeschool over on the English Amiga Board, both Lemon sites have been hacked:

SQL injection, LA and L64 sites compromised. The hackers want money to reveal how they did it.

It may take some time to secure the site, but Kim says it can be done given some time.

This is an increasing problem, so I hope eab is secure?

Mark

[NormanDunbar]

Oh dear, oh dear!

I can reveal how they did it or free!

SQL Injection. Basically, the input "forms" don't to any validation and just pass the entered data into a SQL statement that they build up from scratch. Then they execute it. This is seriously bad and I would advise against ever doing business/hobbies with these web sites ever again!

I'm typing this as a retired database administrator, I know about SQL injection because I've been preventing it for years!

Cheers,
Norm.