Users or all tables were dropped, site is entirely a 500 now. I seriously doubt they have any backups either...
I don't want the notice of insecure password/log-in on my website
11–13 of 13 posts
Re: I don't want the notice of insecure password/log-in on my website
#12> Your notice of insecure password and/or log-in automatically appearing on the log-in for my website, Oil and Gas International, is not wanted and was put there without our permission
Just wait until he finds out that firefox is blitting pixels to the display buffer! Who invited them anyways?
Re: I don't want the notice of insecure password/log-in on my website
#13It's unfortunate the IT had to find out the hard way just how broken their site security was. It's worse that this isn't the only site out there that is that broken. It's common, they just happened to publicize their lack of knowledge of security and then users went poking around. "Oh hey, SQLi works." and that's that...
Here's hoping they manage to give proper disclosure to their customers/users (hah...doubtful).