search

vzdc / vzdcwebsite

https://www.vzdc.org
3 stars 4 forks source link

Domain not pointing correctly #21

Closed iccowan closed 5 years ago

iccowan commented 5 years ago

It appears the domain has been altered and is not pointing correctly. It should be pointing to the public directory of the files and how it is now is a big security issue.

Upon fixing the issue, the database password, API key, VATUSA JWK, and email password should be reset as it is now exposed: http://preprod.vzdc.org/.env

iccowan commented 5 years ago

Ah, I think what may have happened is you removed the virtual host for the website (possibly, but I could be incorrect). What you should do is remove the DNS record as well and leave the virtual host until the DNS record has propagated completely. I still recommend resetting all the passwords as noted above, just to be safe.

victor46 commented 5 years ago

I'll change all 3.

victor46 commented 5 years ago

Yes - I changed over the servers.

iccowan commented 5 years ago

Sounds good.

Make sure you change them in the .env file on the live server and then run "php artisan config:cache" in order to keep things working (I always forget to cache them).

victor46 commented 5 years ago

Fixed, pass and API / JWK keys changed.