Security breach in Discourse forum with SSO

[codinghorror (Jeff Atwood)]

Oh my bad, I read that as 1.7 beta2. You’re right, it is up to date

You need to follow the advice here:

What to do if your Discourse is compromised

We’ve recently had two reports of Discourse sites that were compromised, likely due to weak admin account passwords. So we’d like to document: what to do when compromise happens what we can do to better prevent this in the future The Database Please note that Discourse, for several years now, has the following protections in place around the site database: Full database backup download links will only be sent via valid email of a site administrator, so you can’t just log in (via shoulder …

You should also check the Admin, Logs for staff actions to determine if there are any unusual staff actions there. To be able to download the database they would need to

• have SSH access to your server

or

• become an admin on your site