Hi folks,
Yes, the site was defaced this morning sometime while I was sleeping peacefully. The hacking was not directed at TESSource.net itself. This wasn't a disgruntled member of the community or someone who doesn't like me, it was a script kiddie who found an exploit on another site on the server who then maliciously attacked other accounts on the server. There is little defense against this, if an account is compromised on a server the problems can often be catastrophic.
As a result ALL sites on the server TESSource is on were attacked and any folders with world-writeable permissions (normally only folders that are used for uploads) had their files deleted and that colourful display uploaded in their place. All the mods on TESSource located at files.tessource.net were deleted, but thank god for backups! Unfortunately the backup did not contain the 30 latest uploaded mods to the database, and so I will have to remove these mods from the database (since I have no copies of these files).
A list of the mods lost:
Mournhold City of Lights City of Magic Texture Replacer
Gondor Gear 1.0
Fleece's Illegals
Mortis Noctae.zip
The Blades Of Darkness and Light
Dragonbone Armor v.1.2
Balmora Castle
Hostile Attackers 3.0 & Friendly NPCs 1.0
NPC edit
Bonsai Guars
All stronghold non-equipping transport ring.
Hoss's Armor Display Case.zip
Drow Armoury
NecroSign
ra5946 Asian Pack 2 V2.0
Armor of Sotha Sil
bal guru
Aleanne Clothes & Armor 2
Bonsai Creatures
Sorcha Ravenlock's Orc Females
The Gate to Oblivion
cook
ring of trees
Elder NPC Resource Headpack
Vagabond Armor
Demon Race Females
Clean Ancient Headdress
Simple Elegance Bed Room Group
Better Daedric Armor 1.0
Japanese House V1.4
If you know the authors (or are the author) of these mods please inform them of what has happened, and ask them to please reupload them to TESSource. I'll be creating special backup scripts for TESSource to make sure this situation doesn't arrise again.
I apologise for the inconvenience and the nasty message that was on the page but sadly there is nothing I can do when another site is compromised, except button-up-the-hatches to try and stop the problem from happening again.
Thanks all, and thanks to all the people who emailed me. I've just realised my contact page doesn't have an area to let me know your email, so I can't reply to your emails. But thanks anyway!
Regards.