Security Alerts

SQL inejection issues fixed

Leave a Comment / Announcements, Security Alerts / By Dan Langille

The SQL injection issues, at least all that I could find, are fixed. The first alert was on March 18th. That went out via: Twitter account status page a notice on the top of each page of the website See also FreshSource code fixes. Short version everything we know about is fixed we saw no …

SQL inejection issues fixed Read More »

FreshSource code fixes

Leave a Comment / Announcements, Security Alerts / By Dan Langille

In this post, I’ll talk about how someone was able to use SQL injection to spin up the database server to 100% utilization. I found the queries in the logs, duplicated the situation on dev, patched the code, and updated the website. See also SQL inejection issues fixed. In this post: FreeBSD 13.1 PostgreSQL server …

FreshSource code fixes Read More »