WEN'S Horizon - WENSH Affairs

Hacker problem

These days Google flagged wensh.net as a malicious site. This is because the server was hacked, probably a few days ago. I've already submitted a ticket about this to the hosting company and am still waiting for a reply.

The hacker is pretty smart. The server now will redirect any http request to a malicious site if the http request is referred from a search engine (as far as I know, Google and Yahoo). If I type in the address bar of the browser http://www.wensh.net and hit enter, I have no problem visiting the site, and there's no malicious software/link at all. However, if I try to access the site by clicking the link in a search engine (eg. search site:wensh.net in Yahoo and click a link in the result), the server will not show the site but instead return a 302 code and redirect to the following address:
http://89.28.13.202/in.html?s=ix
which is a malicious website. Warning: if you want to try this, it is strongly suggested that you use your firewall to block the ip 89.28.13.202 first.

The difference between the two ways of accessing the site is the "referrer" section in the http request. In the 1st way, there's no "referrer" section or it would be empty. And here's a sample server log in this case:
"GET / HTTP/1.1" 200 5861 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.4) Gecko/2008111318 Ubuntu/8.10 (intrepid) Firefox/3.0.4"
In the 2nd way, the "referrer" section would indicate the address of the search engine. In this case, the log would be:
"GET / HTTP/1.1" 302 290 "http://siteexplorer.search.yahoo.com/search?p=http%3A%2F%2Fwensh.net&bwm=p&bwms=p&fr=sfp&fr2=seo-rd-se" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.4) Gecko/2008111318 Ubuntu/8.10 (intrepid) Firefox/3.0.4"

[New feature] Multi-language support

(Chinese version of this topic, 中文版)

This website will automatically display an appropriate language (English/Chinese) according to page content, browser language, etc. Users can switch languages as well.

This feature is still under debugging.

New look and new name

WENSH.net will mainly promote the traveling topics, the recipes (along with some restaurant reviews), and the photo gallery. Other categories will still be published and can be found at the bottom of every page.

Test the end of daylight saving time

Daylight saving time ended last night. This post is for checking if the codes can adjust the time automatically.

[New feature] Upgraded to NetNest 2.0 alpha2

New features:

English user interface;
Anonymous commenting;
Login improvement;
Management improvement.
Bugs fixed.

[Bug] Daylight Saving Time in the USA needs correction

Starting in 2007, daylight time begins in the United States on the second Sunday in March, which is three weeks earlier than usual, and ends on the first Sunday in November.

The clock of WENSH.net need to be adjusted.

[Bug] Google Map cannot display on IE7

No clues on what's wrong so far.

[Event] WENSH.net gets into top 1 million in Alexa rank

The rank now is 776,910

[Bug] Timezone conversion not correct in XML output (no content)

[Event] Stupid ICP registration for this site cancelled successfully

Got notified by email a few minutes ago. Waiting for GYPP's ICP registration cancellation.

[Event] Timezone changed to "America/Los_Angeles"

Since 1/27/2007, the timezone of this website changed from China Standard Time (CST, GMT+8) to America/Los_Angeles, that is, Pacific Standard Time (PST, GMT-8) in winter and Pacific Daylight Time (PDT, GMT-7) in summer.

[TODO] Translation

Translate the UI into English. Old topics and essays will not be translated.