Sorry folks... that was actually due to a bug in YAF ip banning. Nothing to do with hacking.

Also, my initial thoughts about the breakin: my machinekey (for encoding viewstate) was the same as the distributed YAF release v1.9.1 (in the .config). So they were figuring out a way to manipulate the view state and then post it.

Obviously, the key is no longer the one distributed and I strongly suggest everyone generate their OWN key for their web.config file, just in case:

http://www.developmentno...achinekey_generator.aspx

please explain... I'm not seeing the issue

I have IIS7 and SQL Server 2005 standart and I'm trying to install YAF-v1.9.1 on my server.

when I try the installing every time I get this error in popup. this is diffrent problem i know.

---

FILE:
tables.sql

ERROR:
Invalid column name 'Type'

STATEMENT:
IF NOT EXIST(SELECT 1
FROM db.syscolumns
WHERE id= Object_id(N'yaf_EventLog')
AND name = N'Type'
BEGIN
ALTER TABLE dbo.yaf_EventLog
ADD TYPE INT NOT NULL CONSTRAINT DF_yaf_EventLog_Type
DEFAULT(0)
EXEC('update yaf_EventLog set Type=0')
END

I cant install this forum. this time I try it on another server. give me this eror when install

Cannot add rows to sysdepends for the current object because it depends on the missing object 'yaf_forum_delete'. The object will still be created.
Cannot add rows to sysdepends for the current object because it depends on the missing object 'yaf_topic_delete'. The object will still be created.
Cannot add rows to sysdepends for the current object because it depends on the missing object 'yaf_user_upgrade'. The object will still be created.
Cannot add rows to sysdepends for the current object because it depends on the missing object 'yaf_topic_delete'. The object will still be created.
Cannot add rows to sysdepends for the current object because it depends on the missing object 'yaf_topic_updatelastpost'. The object will still be created.
Cannot add rows to sysdepends for the current object because it depends on the missing object 'yaf_topic_updatelastpost'. The object will still be created.
Msg 207, Level 16, State 1, Procedure yaf_nntptopic_savemessage, Line 37
Invalid column name 'VIEWS'.
Msg 207, Level 16, State 1, Procedure yaf_post_list, Line 0
Invalid column name 'VIEWS'.
Msg 207, Level 16, State 1, Procedure yaf_replace_words_delete, Line 7
Invalid column name 'ID'.
Msg 207, Level 16, State 1, Procedure yaf_replace_words_edit, Line 8
Invalid column name 'ID'.
Msg 207, Level 16, State 1, Procedure yaf_replace_words_save, Line 23
Invalid column name 'ID'.
Msg 207, Level 16, State 1, Procedure yaf_topic_active, Line 20
Invalid column name 'VIEWS'.
Msg 207, Level 16, State 1, Procedure yaf_topic_move, Line 23
Invalid column name 'VIEWS'.
Msg 207, Level 16, State 1, Procedure yaf_topic_save, Line 24
Invalid column name 'VIEWS'.
Cannot add rows to sysdepends for the current object because it depends on the missing object 'yaf_user_save'. The object will still be created.
Msg 207, Level 16, State 1, Procedure yaf_user_removepointsbytopicid, Line 13
Invalid column name 'userid'.
Msg 207, Level 16, State 1, Procedure yaf_watchtopic_list, Line 11
Invalid column name 'VIEWS'.

turkish language file is very interesting.
Open turkish.xml and find this column

<Resources language="English" code="en">

and change

<Resources language="Turkish" code="tr">