"If you use php or any script that is loaded on the server, you'll need to let me know and it will be reinstalled for your site. " If these scripts accept input from the user/surfer then you need to filter the data so it does not allow script coding to be entered by the user/surfer. Michael Andrews, ASC Minnesota *************************** Please Forward to Applicable Project Lists ******************************* I wanted to give everyone an update on the sites that are hosted at theusgenweb.org or MTGenWeb, WIGenWeb, SDGenWeb - Hopefully I've not missed any. Due to the latest infection, ftp access was removed from all websites hosted on the above domains late evening on the 21st of October. We chose to take this course so that we could determine where the infected files were coming from. With only a couple of us changing files, it has made it easy to see what other IP addresses have been gaining access to the server account. By shutting down ftp access, it appears that we contained the infection, thank goodness. We want to be sure of that, though, so until we can make our way through everything one more time, no passwords will be issued. I realize that many of you are chomping at the bit to get back to working on your sites. We will get you back to them as soon as we can. In the meantime, you should know that we're removing scripts and php from sites that don't use them. If you use php or any script that is loaded on the server, you'll need to let me know and it will be reinstalled for your site. This step is being taken because most of the infections are using either cgi scripts or php - and we want to curtail any opportunity for infection of our/your sites. Any sites that are not being used are also being deleted. Again, this is so that we don't give the hackers easy places to hide his/her files. If we delete a site and you decide you want to host your site on theusgenweb.org, let me know and we'll rebuild it. We don't want to prevent anyone from hosting their site on this account, we just want to tighten things up. Thanks for your patience as we continute to work through these issues. Again, I'd love to turn everyone loose to work on your sites, but need to be sure that we've got clean sites for our visitors and researchers, much less ourselves. Sherri Bradley National Coordinator USGenWeb Project Information about the USGenWeb Project at http://usgenweb.org Advisory Board Agenda http://usgenweb.org/agenda2.php

That's being done, Michael. Sherri -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of [email protected] Sent: Wednesday, October 28, 2009 9:30 AM To: [email protected] Subject: Re: [STATE-COORD] Website Status "If you use php or any script that is loaded on the server, you'll need to let me know and it will be reinstalled for your site. " If these scripts accept input from the user/surfer then you need to filter the data so it does not allow script coding to be entered by the user/surfer. Michael Andrews, ASC Minnesota *************************** Please Forward to Applicable Project Lists ******************************* I wanted to give everyone an update on the sites that are hosted at theusgenweb.org or MTGenWeb, WIGenWeb, SDGenWeb - Hopefully I've not missed any. Due to the latest infection, ftp access was removed from all websites hosted on the above domains late evening on the 21st of October. We chose to take this course so that we could determine where the infected files were coming from. With only a couple of us changing files, it has made it easy to see what other IP addresses have been gaining access to the server account. By shutting down ftp access, it appears that we contained the infection, thank goodness. We want to be sure of that, though, so until we can make our way through everything one more time, no passwords will be issued. I realize that many of you are chomping at the bit to get back to working on your sites. We will get you back to them as soon as we can. In the meantime, you should know that we're removing scripts and php from sites that don't use them. If you use php or any script that is loaded on the server, you'll need to let me know and it will be reinstalled for your site. This step is being taken because most of the infections are using either cgi scripts or php - and we want to curtail any opportunity for infection of our/your sites. Any sites that are not being used are also being deleted. Again, this is so that we don't give the hackers easy places to hide his/her files. If we delete a site and you decide you want to host your site on theusgenweb.org, let me know and we'll rebuild it. We don't want to prevent anyone from hosting their site on this account, we just want to tighten things up. Thanks for your patience as we continute to work through these issues. Again, I'd love to turn everyone loose to work on your sites, but need to be sure that we've got clean sites for our visitors and researchers, much less ourselves. Sherri Bradley National Coordinator USGenWeb Project Information about the USGenWeb Project at http://usgenweb.org Advisory Board Agenda http://usgenweb.org/agenda2.php ------------------------------- To unsubscribe from the list, please send an email to [email protected] with the word 'unsubscribe' without the quotes in the subject and the body of the message