A lot of you have been asking if I was hacked.
Yes I was.
Big deal? no.
But a lot of you have also been asking how I was hacked. Here's the story.
It all began one morning, about 12 am. I was sitting on the computer trying to make a link to easily cancel your subscription to my newsletter emails.
So, half asleep, I went to bed satisfied, while overlooking the logic of the code I had just put on the website.
The code stacked the cancel URL from record one, to the highest record. Because I'm the first record, it didn't show up with my test email.
The cancel link behaved like a password reset, giving a back door to your account without logging in.
So when I sent this email, everybody had my account info at their fingertips, and everybody else under them.
I noticed my main account wouldn't log me in. Odd, I thought. Figured it was one of my bugs with the password encryption. So I reset my password successfully.
Apparently, someone has changed my password. Because the "back door" login blocks all admin powers until you log out, the perpetrator had to change my password in order to log back in, and have some fun with my admin rights.
One of the things were sending some spam and an f-bomb in a newsletter. I found that very humiliating.
Then he/she went to the ShoutBox and spammed there too, according to witnesses and my Shout logs.
So I took immediate action, and disabled my account for a few hours until I was sure the session was over.
Then I brought it back, and changed my password once again.
Later that evening, I noticed I couldn't log in yet again. So whoever did this still had access to my account. Hopefully they don't anymore.
I will be making another cancel link shortly. This time, it will be more secure.
See? No big deal. Just a small accident on my part. But, when I find the person who did this, it will be time to ruin some reputations
Well make mistakes & over look when we're tired. It's why, when our bodies tell us it needs sleep, we shouldn't ignore it. I hope everything is fixed Chuck.