As you may have noticed, we had a few problems with our infrastructure. But now our project site (where you can submit bug reports, feature requests, and patches) and CVS (both the CVS viewer and anonymous CVS are back up again. Please use them.

I've often needed access to my error.log from a machine that did not have an SSH client installed. I created this little hack that can live within a static page:

1. Go to the staticpage admin screen and hit the "Create New" button.
2. In the PHP drop-down be sure to select "execute PHP"
3. For the group down-down, be sure to select "Root" and be sure to uncheck teh Read flag for Members and Anonymous (NOTE: this is important for security)
4. In the "content" textarea add the following:

   global $_CONF;
   require_once $_CONF['path_system'] . 'classes/downloader.class.php';
   $dMgr = new downloader();
   $dMgr->setPath($_CONF['path_log']);
   $dMgr->_setAvailableExtensions(array('log' => 'text/plain'));
   $dMgr->setAllowedExtensions(array('log' => 'text/plain'));
   $dMgr->downloadFile('error.log');
   if ($dMgr->areErrors()) {
       $dMgr->printErrors();
   }
   

5. Save the page

That's it. Simple, elegant and as secure as Geeklog is.

You may want to check if you have a registered user on your site who's email address is new@sys54.3fn.net or new1@sys54.3fn.net (or a variation thereof). On at least two Geeklog sites (including geeklog.net) that user has suddenly started posting comment spam (for drugs and pills) after the account lay dormant for a year or longer. The oldest accounts found so far date back to August 2004.

Account names differ but follow a pattern: 9NoraRebecca, 3BillAlika, 7FlossieOma, 9AlmaNoguri

We suggest that you delete or at least ban that user (banning a user is only supported as of Geeklog 1.4.0). If you find any interesting variation of the above patterns and suspect it's the same user, feel free to email us and send us the details.