We were hacked...

[rob]

On or around midnight ET today, the forum was hacked. I restored the forum to the state it was two days ago, so some of your posts have no doubt been lost. Sorry :/

[Anonymous2]

The Wiki is still affected. I haven't found any recent phpBB exploits, but DreamHost was hacked about a month ago.

[rob]

It's possible that phpBB was attacked through some other part of the site. In any case, we're taking whatever we have to offline. At least the forums are now clean.

[thinkJason]

I was wondering where all those posts went. No good!

[dR_wH0]

phpBB forums tend to be a good target for hacks/injections. At least more than other forum platforms. You should try and keep daily backups and install updates accordingly.

Cheers,

[daniel_reetz]

Yep, we do keep daily backup, and the problem was not the forum - the hack came through our wordpress theme, which used an extension with a recent vulnerability. Once it had infected one PHP file it was able to take the entire site. We went back a couple days just to be sure we were in the clear.