Hi all


No-one has expressed an opinion on the CMS theme apart from Johan, who said he would prefer to keep the old theme as it has more character than generic WordPress white backgrounded themes. I don't know if the existing theme can be salvaged. In any case we need to get the site up and running again so the fem(un)hack editors can upload their content for their issue.

Since Peter Troxler is now on board to help with CMS issues, it would be greatly appreciated if he could (when humanly possible) get in touch with Javier to sort out the following:

1-implementation of his workaround (suggested below) to salvage original CMS theme;

2-if not possible to salvage original theme, use of https://wordpress.org/themes/twentyten/ as stopgap measure;

3-checking of CMS to make sure no infected files are present;

4-updating of plugins, widgets etc on CMS.

Concerning the surveys site, we have not been able to contact Jarkko Moilanen so will put that to the side for the moment (unless it affects the rest of the domain? but that seems doubtful).

Thanks to Peter and Javier for their help and for letting us know when they have some news on this front.


cheers,


Mathieu (on behalf of jopp core team)




From: jopp-public-bounces@lists.ourproject.org <jopp-public-bounces@lists.ourproject.org> on behalf of Dr. Peter Troxler <trox@fabfolk.com>
Sent: Wednesday, October 14, 2015 17:19
To: Journal of Peer Production's general and public list
Subject: Re: [JoPP-Public] New theme for JoPP website [was: Re: Jopp Web Site: Server error 503]
 
Hi all

have you considered generating static html for the public site from a non publicly accessible site with the current theme?

this could be a quick and easy to implement workaround, check wordpress.org for corresponding plugins

/ Peter

On 14 Oct 2015, at 05:54, Mathieu ONeil <mathieu.oneil@anu.edu.au> wrote:

Hi all

Javier (who looks after P2P Foundation servers) has investigated and reported that the JoPP website has been compromised. He has taken steps to fix this: thank you so much Javier!

An urgent task is that we need to change the WordPress theme as this appears to be a source of the problem. I feel bad about this for the Fem(un)hack eds who are, very naturally, experiencing anxiety about this hiccup. At the same time, we are all volunteers and sometimes in volunteer projects things take a bit longer to fix. But, they will be fixed. On the positive side (for me) I'm happy to change themes.

>From Javier:
"The peerproduction.net website was hacked sometime in the summer. There's a persistent vulnerability in the theme in use, which apparently hasn't been updated in a while and is unsupported. I've ported all content to the P2PF webserver. Of course, I didn't copy over the theme nor any other infected files. I also brought over the surveys website and updated its plugins, and apparently this broke the layout slightly. I didn't enable the php-exec plugin, which represents a serious security vulnerability.

In peerproduction.net I enabled the default WordPress theme for the time being. For best support, you can pick any GPL theme from https://wordpress.org/themes/ . If you'd like you may pick a commercial theme from https://www.elegantthemes.com/gallery/ and use it through my own developer license.

In short, peerproduction.net needs to be adapted to use a newer theme, and the layout on surveys.peerproduction.net should be updated to use the newer widget library. All in all, it would be good to check out the whole websites to make sure that no spam or infected content made it trough.

James already updated the DNS records and they should propagate shortly, making the new websites generally available. I'm flipping the switch for the old ones so that people don't update them inadvertently in the meantime."
[end quote]

>From this, four things:

A-THEMES
So, the sooner we pick a theme, the better. I prefer a minimal style with some space for the eye to rest. Specifically, I like these:
https://wordpress.org/themes/twentyten/
https://www.elegantthemes.com/gallery/vertex/ [though not sure about the mountain pic - a bit cliche?]
As time is of the essence, anyone who feels strongly about this, please give your opinion about this before Friday 16 October 3pm GMT.
Once opinions have been heard the editorial team will make a decision and inform Javier.

B-SURVEYS
Though the surveys.peerproduction.net was set up as a subdomain of peeproduction.net we do not run it or have anything to do with it. I guess Jarkko Moilanen needs to fix his widget, advise Javier asap if there is an issue, or if the site is inactive, cut it loose?

C-WEBMASTER
This is a recurring issue. Some of us know some things but no-one seems to know enough. We need to find a solution, so will be communicating privately with people who are able to help.

D-PROXY SITE
maxigas mentioned he set up a proxy prior to JoPP 5 going live. Is it worth doing now for fem(un)hack or does the current situation prohibit this? thanks for advising.

cheers,

Mathieu

________________________________________
From: jopp-public-bounces@lists.ourproject.org <jopp-public-bounces@lists.ourproject.org> on behalf of stoopt <stoupin@riseup.net>
Sent: Tuesday, October 13, 2015 11:17
To: jopp-public@lists.ourproject.org
Subject: [JoPP-Public] Jopp Web Site: Server error 503

Hi all,

We, the Feminism and (Un)hacking editors, have started uploading papers
for our upcoming release. Unfortunately there seems to be a problem with
the server at the moment. A 503 error. Can someone look into this please?

Much appreciated,
Sophie

_______________________________________________
JoPP-Public mailing list
JoPP-Public@lists.ourproject.org
https://lists.ourproject.org/cgi-bin/mailman/listinfo/jopp-public

_______________________________________________
JoPP-Public mailing list
JoPP-Public@lists.ourproject.org
https://lists.ourproject.org/cgi-bin/mailman/listinfo/jopp-public