Change your passwords

Hi everyone.

I have observed that some old accounts are being hijacked and are posting spam. I am not sure what the root cause it but I suspect that there is some password leak that I am not aware of.

Therefore, to avoid such an issue in the future, I have forced all accounts here to change their passwords. If you see anything out of the ordinary, it's probably because of that.

Sorry for any inconvenience.

If you are unable to access your account and need support, message me on telegram: @dd11011.

I think you should force logout everyone too. I am still logged in and the session is OK.

I'm not sure if I can do that. Let me see.

thetechfreak said:
I think you should force logout everyone too. I am still logged in and the session is OK.

No dice on this.

I am about to initiate one more password reset on all users. It appears that the previous one did not have any effect on the spammers hijacking accounts here.

I request all members to cooperate and reset your passwords when you get the appropriate prompt.

I will begin in sometime.

I didn't get logged out from the session FYI @Desmond , will logout and see if my password has changed or not

EDIT: old pass is working

Oh well. I will see if I can ban all registered users who haven't verified their email. Not sure what else I can do.

In the meanwhile, keep a look out for any spam posts and report those immediately.

K

You can change below line in config.php

$config['cookie']['prefix'] = 'xf_';

to:

$config['cookie']['prefix'] = 'xfr_';

And everyone will be logged-out.

Config file is located in XF installation --> src/config.php

kunnusingh said:
You can change below line in config.php

to:

And everyone will be logged-out.

Config file is located in XF installation --> src/config.php

I would have if I had access to the server

Only Digit IT team has access. I am just a volunteer here.