OBBLM - cemetery got hacked

[Hegel]

Lately I received spam entries to my cemetery. A couple of regular entries got edited with spam (medicals and stuff). I used an admin account to remove the comments and kept the entry itself. Minutes later the spam reoccured.

Any idea how to prevent this or how this is being done ?

[mzukerman]

This happened to our site about a year ago. We ended up having to password protect the site itself, which is too bad because now it can't be referred to by members who are not in our league. Our admin said there was a vulnerability exploit in the OBBLM software itself. I was hoping by now it would be patched.

Anyone else have any news on this?

[nicholasmr]

Yes, this is a bug. The fix is here: https://code.google.com/p/obblm/source/detail?r=992

Remember, code.google.com/p/obblm is the place to report OBBLM bugs etc.

[NickJMereel]

Happened on mine too but Nicholas fixed it.
Yaaaay

[Hegel]

With the fix Nicolas provided the cemetery now stays clean !