Net54baseball.com Forums

Net54baseball.com Forums (http://www.net54baseball.com/index.php)
-   Net54baseball Vintage (WWII & Older) Baseball Cards & New Member Introductions (http://www.net54baseball.com/forumdisplay.php?f=2)
-   -   System Updates Thread ...7/21/20 . Security and Pictures (http://www.net54baseball.com/showthread.php?t=285808)

Ronnie73 07-19-2020 12:16 AM

Quote:

Originally Posted by steve B (Post 1999696)
It's a bit surprising the ISP isn't more helpful. But then failure to keep hosted data secure as an upsell opportunity is sooo software industry.

It usually depends on the hosting company and the package you sign up for. I was so unhappy with the service and costs that back in 2003 I started buying my own servers. So basically I only paid for a cable and DSL connection each month. For what I was doing at the time, I saved a lot of money and learned a lot too. Biggest issue was nearly every three months, a better faster server would be released. There's just no way to keep up. Currently I have a dedicated server with GoDaddy running Windows and Microsoft SQL because I've always had issues with jet databases or mySQL because they couldn't handle large amounts of data and would usually timeout before a read/write could happen. Service with GoDaddy is not much different than how it used to be many years ago. A few months ago I had a problem with my database password expiring but didn't know that it was set on a timer. So I would literally get an error as if the server wasn't even plugged in. It was like Microsoft SQL was deleted. They refused to even say one word to me or even say something like, maybe your password expired lol. The way I felt at the time was disappointing, especially for how much I was paying per month. It also made me feel like if I was paying the extra $200 per month for a support team, that it would be questionable if they would even know anything. Plus after they would tell me to try something, I'm still the one applying fixes on the server. That's why I stayed away from that package. All they do is apply Microsoft updates, which technically can be set up to automatically run on it's own. I think it was only $10 lol.

I wish I knew of a place with reasonable pricing, knowledge, and unlimited options. This is probably the exact same thing Leon needs too.

Leon, thank you for everything you do. You never get enough recognition running this site. There's noting worse than failed hardware. Which seems like was the original issue, which then corrupted database files. There should always be a hardware Raid configuration when working with large databases. Having the right configuration will alert a hardware failure and a hot swap hard drive replacement can be done with no data loss and no down time. I like to use Raid 5 or Raid 6. The only difference is Raid 5 only allows one hard drive failure at a time, while Raid 6 allows 2 hard drive failures at the same time. Raid 6 cost more because more hard drives are involved. Frequent off-site backups are always recommended for catastrophic events such as fire, theft, or natural disaster. I just wanted to mention these few things because I read that you were looking into a more advanced hosting package.

AddieJoss 07-19-2020 09:15 AM

Leon, like everyone else, I appreciate what you provide on Net54. I’m not sure if it’s related, but when I logon, in the URL area, it’s says “not secure”. I believe a security certificate makes it secure. I know that doesn’t solve everything but an easy fix and will definitely help. Just a quick thought.

Leon 07-19-2020 09:23 AM

Quote:

Originally Posted by AddieJoss (Post 2000458)
Leon, like everyone else, I appreciate what you provide on Net54. I’m not sure if it’s related, but when I logon, in the URL area, it’s says “not secure”. I believe a security certificate makes it secure. I know that doesn’t solve everything but an easy fix and will definitely help. Just a quick thought.

It is secure. Click on the url and you will see the https....on a cell phone it shows the lock. WE have old links that are http and not https which is why you don't see the lock.....hopefully that can get figured out too but not too important as the secure certificate is there...

RedSox3 07-19-2020 12:31 PM

There's a Secure Sockets Layer (SSL) certificate in place, effective for about another 6 months.

A utility website, http://whynopadlock.com (enter net54baseball.com and click the "I'm not a robot" checkbox) shows that all the pieces of the puzzle are in place except one:

"Protocols: You currently have TLSv1 enabled. This version of TLS is being phased out. This warning won't break your padlock, however if you run an eCommerce site, PCI requirements state that TLSv1 must be disabled by June 30, 2018."

This doesn't sound like something we can fix ourselves, and the web hosting system administrators should probably do something about it.

What we found on the OBC site was that if there are any references to "http://" in any script producing a web page in the net54baseball.com domain, they should be changed to "https://" in the program script files. OBC had several dozen of those protocols that needed to be changed. I don't think users can easily change the vBulletin script files, and any changes would be overwritten when a newer version of vBulletin is installed.

In the meantime, as Leon said, even though the browser warns "Not secure," it'll behave like a regular secure website.

Best,
WMD

Wayne Delia, Webmaster, OBC (Old Baseball Cards), https://oldbaseball.com

Leon 07-19-2020 01:01 PM

Quote:

Originally Posted by RedSox3 (Post 2000552)
There's a Secure Sockets Layer (SSL) certificate in place, effective for about another 6 months.

A utility website, http://whynopadlock.com (enter net54baseball.com and click the "I'm not a robot" checkbox) shows that all the pieces of the puzzle are in place except one:

"Protocols: You currently have TLSv1 enabled. This version of TLS is being phased out. This warning won't break your padlock, however if you run an eCommerce site, PCI requirements state that TLSv1 must be disabled by June 30, 2018."

This doesn't sound like something we can fix ourselves, and the web hosting system administrators should probably do something about it.

What we found on the OBC site was that if there are any references to "http://" in any script producing a web page in the net54baseball.com domain, they should be changed to "https://" in the program script files. OBC had several dozen of those protocols that needed to be changed. I don't think users can easily change the vBulletin script files, and any changes would be overwritten when a newer version of vBulletin is installed.

In the meantime, as Leon said, even though the browser warns "Not secure," it'll behave like a regular secure website.

Best,
WMD

Wayne Delia, Webmaster, OBC (Old Baseball Cards), https://oldbaseball.com

Hey Wayne
The hosting company is currently restoring the attachment DB and doing what you had said to do. It is taking quite a bit of time..

I am not sure how to fix the HTTPS/lock issue as we have thousands (probably) of links that are http....
thanks again

.

Ronnie73 07-19-2020 11:50 PM

Quote:

Originally Posted by Leon (Post 2000576)
I am not sure how to fix the HTTPS/lock issue as we have thousands (probably) of links that are http....
thanks again

I've used a program in the past from funduc.com that's a search and replace application. I've used it for similar changes such as updating a copyright date. It searches all the code and gives you the option to view each found example and apply the change one by one or you can change everything found with one click. It's also helpful when searching for certain code within a website and finding exactly what you were searching for and where it is. It saves a ton of time, especially when your dealing with a website that has many files. One of my websites has over 2500 files of code and it worked super fast every time I ever used it.

Leon 07-20-2020 06:22 AM

Quote:

Originally Posted by Ronnie73 (Post 2000762)
I've used a program in the past from funduc.com that's a search and replace application. I've used it for similar changes such as updating a copyright date. It searches all the code and gives you the option to view each found example and apply the change one by one or you can change everything found with one click. It's also helpful when searching for certain code within a website and finding exactly what you were searching for and where it is. It saves a ton of time, especially when your dealing with a website that has many files. One of my websites has over 2500 files of code and it worked super fast every time I ever used it.

Thanks Ron. I will look into it

I am also very aware of the issues the site security warning when logging in. They are being addressed. The site does have a security certificate. Just click through the security stuff. It only has to do with old http vs. https code. And on a mobile phone the lock shows.

Just spoke to the hosting company again...915am CST....they have applied the latest security cert but since they are not positive it will fix this I don't want to take the site down now for a reboot to apply the fix. The reboot is going to be done at 3am EST.....

.

Rich Klein 07-20-2020 08:23 AM

I think Richard "Dimples" Fields said all we need to know about Leon's month with this song

https://www.youtube.com/watch?v=qduCJYilnaY

Regards
Rich

Leon 07-21-2020 06:47 AM

The certificate upgrade was done last night but the security issues seem to remain (at least for me). So we will keep at it until it's fixed. The site is secure we just need to fix the old http links and make them https.....

After speaking with the hosting company this morning it looks like the process was done automatically and needed to be done manually. More to come later....

On the picture front, it is still being worked on too. It looks like the old pictures in the Community Photo album have been saved. Yay....
There is a chance the new ones (in the last week) can't be saved but we are still hopeful.
The 2 forum members working on the database have done an extraordinary job so far. We, especially me, owe then a debt of gratitude

Leon 07-21-2020 12:47 PM

1 Attachment(s)
It looks like the most recent security license update has cured some issues. We now have a padlock when on a pc. And we aren't getting that really awful looking security issue when logging in.... We are getting there....

Once these issues have settled down and we are stable for a short time (days) we will look at upgrading our s/w. The main thing is for the site to stay up and be stable.. I am in present discussions with the hosting company for more security to help prevent attacks in the future. WE will be addressing the backup policies and a lot more too....

And some 1946 Morley Studio cards....
.

atx840 07-21-2020 01:23 PM

Quote:

Originally Posted by Leon (Post 2001184)
It looks like the most recent security license update has cured some issues. We now have a padlock when on a pc.

Woot!

One of my favs.

https://live.staticflickr.com/8536/8...6fcbc040_b.jpg

Joe_G. 07-21-2020 08:19 PM

Quote:

Originally Posted by Leon (Post 2001088)
On the picture front, it is still being worked on too. It looks like the old pictures in the Community Photo album have been saved. Yay....
There is a chance the new ones (in the last week) can't be but we are still hopeful.
The 2 forum members working on the database have done an extraordinary job so far. We, especially me, owe then a debt of gratitude

On the picture front . . . thank you! I'm not worried about losing last couple weeks of pictures, easy to recover. Fixing the several years that proceeded that was my concern and looks like you are well on the way to having that fixed. Many thanks to those working their tails off to fix the issues (that includes you Chris).

irv 07-21-2020 08:27 PM

Quote:

Originally Posted by Leon (Post 2001088)
The certificate upgrade was done last night but the security issues seem to remain (at least for me). So we will keep at it until it's fixed. The site is secure we just need to fix the old http links and make them https.....

After speaking with the hosting company this morning it looks like the process was done automatically and needed to be done manually. More to come later....

On the picture front, it is still being worked on too. It looks like the old pictures in the Community Photo album have been saved. Yay....
There is a chance the new ones (in the last week) can't be but we are still hopeful.
The 2 forum members working on the database have done an extraordinary job so far. We, especially me, owe then a debt of gratitude

Yes, thanks, Leon. I now see all my photos have returned!

Appreciate all you did and continue to do to keep this site up and running! :)

Leon 07-21-2020 08:57 PM

Quote:

Originally Posted by Joe_G. (Post 2001323)
On the picture front . . . thank you! I'm not worried about losing last couple weeks of pictures, easy to recover. Fixing the several years that proceeded that was my concern and looks like you are well on the way to having that fixed. Many thanks to those working their tails off to fix the issues (that includes you Chris).

That was my thought too, Joe. I can easily tell the guys that we lost a few weeks of pictures and there probably won't be mayham. But if we lose it all, yikes, there could be a mutiny LOL..

I didn't want to say who it was until I asked if it was ok. But yes, Chris Br.owne, worked a lot on this and continues now. As a matter of fact he is now an administrator on the board too. And on another personnel issue, member Dan Bre.tta (hey Dan) SlideKellySlide has stepped down as a moderator. He said he is not on the forum as much and thought it was best. He is still here a member. Thanks again Dan for the years of helping oversee the forum. And Wayne De.lia also did the other heavy lifting on this current project of issues out the yin yang. Another great OBC'er.

More work to come in the future but the system does seem to be smoother than it's been in a long time (knock on wood).

.

.


All times are GMT -6. The time now is 07:45 AM.