bundwallah

member account gone missing

Recommended Posts

Got a PM via FB for a friend who cannot logon.  His account is "photorob" and there is no account listed or post history that matches that name.  

Share this post


Link to post
Share on other sites

Thanks Frank. 

I have jason looking into it now. Not sure what is going on mate but will come back to you. 

Cheers!

Rob

 

Share this post


Link to post
Share on other sites

Looks like his account got deleted.

photorob.thumb.jpg.118e83a6acff865d41ac21303358df10.jpg

Share this post


Link to post
Share on other sites

Just confirming that the account hasn't been deleted, but it has disappeared.

I've dug around into the possible causes and have ruled all out but the database messing up. The webhost will run a db repair to see if we can dig something up, hopefully the account will pop back into existence.

Very concerning as we don't have an easy explanation for it, but we do know it wasn't intentionally or accidentally deleted. All Admin actions are logged in the system and there's no action taken to delete the account. We also know the Admin CP hasn't been breached, so it's not a hacker.

Share this post


Link to post
Share on other sites

I have noticed a few "Guest <username>" accounts in some old threads. Could be more than a few have disappeared.

Share this post


Link to post
Share on other sites

We think so too Fuzz.

I've investigated all options and a database restore looks like our only solution. We don't know why or how it's happened, but suspect a database corruption. That could be from a server reboot, HDD failure, read/write error...anything hardware related. Whatever the case, it's the server not the software.

I need to find out as near as possible when this issue first occurred. Diana emailed me about lunchtime yesterday. Any chance we can find out from photorob when he first noticed this problem?

If we do go with a restore, we're going to lose new threads, posts and members since that database image was taken. We have backups from the 15th (possibly after the issue), 14th (possibly before or after the issue), the 12th (likely before the issue) and 6 other backups dating back to Feb 5.

I suspect that at the least we'll lose a day or two of posts and at the most three days if we want to restore those members, but it depends heavily on when this problem started. New members aren't a big problem, I have an email list for them.

Any help we can get with the timeline would be greatly appreciated as it will minimise data loss, should we opt for a restore.

Share this post


Link to post
Share on other sites

@refresh  Rob's not 100% sure but he estimates last week.  No way to do a "brick" restore of just his account and related postings?

Share this post


Link to post
Share on other sites
4 hours ago, bundwallah said:

@refresh  Rob's not 100% sure but he estimates last week.  No way to do a "brick" restore of just his account and related postings?

Nope, none at all. I checked with Invision about just this thing.

We'd have to restore the entire site. That's a difficult thing to do on a 17000 member forum.

Share this post


Link to post
Share on other sites
4 hours ago, refresh said:

Nope, none at all. I checked with Invision about just this thing.

We'd have to restore the entire site. That's a difficult thing to do on a 17000 member forum.

That seems a bit heavy handed. That kind of restore will wipe out a lot of content and newly created accounts.  Is there any benefit to restoring the site into a VM and then being able to migrate data from the VM into production?

Share this post


Link to post
Share on other sites
19 minutes ago, bundwallah said:

That seems a bit heavy handed. That kind of restore will wipe out a lot of content and newly created accounts.  Is there any benefit to restoring the site into a VM and then being able to migrate data from the VM into production?

Can't do it, the site's too big and it'd take way too long to nut it out. 

Our options are a full restore or try to figure out how to avoid a repeat episode while trying to help those affected by this issue (we can buff the post count and join date for re-registrations and the content still exists albeit with the "Guest" prefix).

The forum's been running for at least 15 years now and this was a first for us. We'd expect a database crash to affect everyone rather than a small segment.

Share this post


Link to post
Share on other sites
5 minutes ago, refresh said:

Can't do it, the site's too big and it'd take way too long to nut it out. 

Our options are a full restore or try to figure out how to avoid a repeat episode while trying to help those affected by this issue (we can buff the post count and join date for re-registrations and the content still exists albeit with the "Guest" prefix).

The forum's been running for at least 15 years now and this was a first for us. We'd expect a database crash to affect everyone rather than a small segment.

That's too bad.   I think it'd be better to forgo the restore and fix the affected users manually.  Since you found the content was not deleted, that's a good foundation to build on.

Share this post


Link to post
Share on other sites

The problem there is we have no way to reassociate users with prior content. That sucks, but at least it's not gone outright.

We don't know how many active users are affected, fortunately there have only been a couple of reports thus far.

Share this post


Link to post
Share on other sites

Rob (Rob Cappuccio) has had his account also affected. He just messaged me about not being able to log on for the last week. His old posts are now marked as "Guest Rob".

Moving forward, are we to suggest members just rejoin, if their accounts are affected?

Share this post


Link to post
Share on other sites

Yes. Please recommend they he uses the same username. We can't link the old posts back up (they're still on the forums with a "Guest" prefix) but we can adjust the post count and join date, if that bothers anyone.

What's concerning is all affected users are "Robs", which concerns me that this was a targeted attack against the Pres. But to do that, they'd need to access the db and run an SQL query for "Rob". I seriously doubt that's happened , it's just a very odd coincidence that the wiped records all seem to start with the first name Rob, even though their display names are quite different.

Also, if an affected member has a Cigar Locker, please contact FOH staff and we'll get the accounts linked back up.

Share this post


Link to post
Share on other sites
27 minutes ago, refresh said:

What's concerning is all affected users are "Robs", which concerns me that this was a targeted attack against the Pres. But to do that, they'd need to access the db and run an SQL query for "Rob".

 

I was thinking the exact same thing last night!

Share this post


Link to post
Share on other sites

It would have been far easier to nuke all members than target a micro-sector, so I'm pretty confident that didn't happen.

Share this post


Link to post
Share on other sites

Boys if you have anyone who is effected and they have a locker can you get them to email me on lisa.goreta@clubczar.com so we can link their new account with their OLH account. Their stock is still showing on the OLH site but just not linked

 

 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

Community Software by Invision Power Services, Inc.