I think my Wiki got hacked :S

[galaxyAbstractor]

First I got this error: Parse error: syntax error, unexpected $end in /home/viggeswe/public_html/ufo/wiki/includes/BagOStuff.php on line 386. I noticed half of the file was missing so I replaced it with the original. Now I get:


Warning: Unterminated comment starting line 104 in /home/viggeswe/public_html/ufo/wiki/includes/Block.php on line 104

Parse error: syntax error, unexpected $end, expecting T_FUNCTION in /home/viggeswe/public_html/ufo/wiki/includes/Block.php on line 104

It all worked yesterday before the downtime... It must got been hacked because half a file doesen't get deleted automaticly, does it?

O well fixed it. Weird now how it connects to wrong database... Something really bad must have happened.

 

[bugfinder]

Its possible that unchecked data is entered can have odd side effects. such as:

if you have a mysql statement of

"select * from mytable where id=".myvar;

you would think ok how bad could that be.. what if my var read:
"0; delete * from mytable" it would select where id was 0 and then empty your table.

data checking is very important.

(PS been a while since I tried to break tables like that in mysql so, it could be completely invalid mysql code, but you get the concept..)