More from: website

Drupal core bug allows remote code execution

This just arrived in email from wordfence.com. If you use Drupal or know someone who does, the Drupal patches need to be applied immediately to prevent / stop remote code execution attacks.

A more detailed overview of upgrade recommendations from the Drupal security team is available on Drupal.org. They have also published a detailed FAQ. This attack has been nicknamed “Drupalgeddon 2.” The previous Drupalgeddon was as high in severity as this, and had automated attacks against unpatched Drupal sites within a matter of hours after the public announcement of the vulnerability was made.

—<snip>—

This morning we are publishing a public service announcement about a severe Drupal core remote code execution vulnerability announced yesterday. If you use Drupal or know someone who does, I’d encourage you to read this post and spread the word.
The vulnerability allows an attacker, leveraging multiple attack vectors, to take complete control of a website. The Drupal team estimates that at the time of the announcement over 1 million sites are affected, about 9% of Drupal sites.
Our focus is usually WordPress security, but given the severity and wide impact of this vulnerability, we feel it justifies a PSA to help spread the word.
Regards,
Mark Maunder
Defiant Inc CEO
—<snip>—


The care, feeding, and breeding of PayPal on your web site

PayPal is notorious for being hard to interface with. People install eStore packages just because they don’t want to deal with it! But I finally found a way to access the data fairly reliably.

If you are trying to use PayPal for your web site payments and want as simple an interface as possible, I highly recommend THIS tutorial. All the others I tried didn’t work. This one was written in 2010 and uses cURL, and remarkably, it actually works. Readmore..


NPO Grant Coop

A group has been proposed for Public Charities in the Fort Wayne / Allen County Indiana area to help each other with grant proposals and technical (website, computer) assistance. This is a ‘Call Out’ to start a new group in the Fort Wayne Indiana area. If your NPO is interested please send me a short email to say so, and include your contact information. Adult Life Training, Inc. will then send out an email to the group so we can start to get together.

An example of contact information is:

John Nash, CEO
Adult Life Training, Inc.
3301 East Coliseum Blvd, RM 136
Fort Wayne, IN 46805
Telephone: 260.432.0014 x128
E-Mail: jdnash@alt-fw.org
FaceBook: http://www.facebook.com/kubulai
LinkedIn: http://www.linkedin.com/in/kubulai
Twitter: http://www.twitter.com/kubulai