# Spam! \[UPDATE: Normal service resumed\]

**URL:** <https://community.failbettergames.com/t/spam-update-normal-service-resumed/27373>\
**Category:** Forums Business\
**Created:** [October 13, 2026, 8:33pm UTC](https://community.failbettergames.com/t/spam-update-normal-service-resumed/27373 "2026-10-13T20:33:51Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![HannahFBG](https://community.failbettergames.com/user_avatar/community.failbettergames.com/hannahfbg/32/164_2.png) [@HannahFBG](https://community.failbettergames.com/u/HannahFBG)\
**Post date:** [October 13, 2026, 8:33pm UTC](https://community.failbettergames.com/t/spam-update-normal-service-resumed/27373/1 "2026-10-13T20:33:51Z")

</div>

We’re having a spam attack that’s making the forums non-functional! Woe!

I’ve enabled read-only mode for now, until someone more technically-minded can take a look, either in the morning or once she’s back from holidays (hi Jem!).

Apologies for the interruption in service!

---

<div class="post-metadata">

**Author:** ![stuartfbg](https://community.failbettergames.com/user_avatar/community.failbettergames.com/stuartfbg/32/1020_2.png) [@stuartfbg](https://community.failbettergames.com/u/stuartfbg)\
**Post date:** [October 14, 2026, 10:08am UTC](https://community.failbettergames.com/t/spam-update-normal-service-resumed/27373/2 "2026-10-14T10:08:12Z")

</div>

Hi all! Normal service has resumed. We’ll be manually approving new sign ups for the time being, but this won’t affect existing users.

---

<div class="post-metadata">

**Author:** ![ragnardegenhand](https://community.failbettergames.com/user_avatar/community.failbettergames.com/ragnardegenhand/32/94_2.png) [@ragnardegenhand](https://community.failbettergames.com/u/ragnardegenhand)\
**Post date:** [October 14, 2026, 1:19pm UTC](https://community.failbettergames.com/t/spam-update-normal-service-resumed/27373/3 "2026-10-14T13:19:38Z")

</div>

It was interesting to see how different browsers reacted to the read only setting. Firefox would only show that page and nothing else, while Vivaldi had this thread and page upon page upon page of luverly helpful spam, spam, spam, spam…

---

<div class="post-metadata">

**Author:** ![phryne](https://community.failbettergames.com/user_avatar/community.failbettergames.com/phryne/32/16023_2.png) [@phryne](https://community.failbettergames.com/u/phryne)\
**Post date:** [October 14, 2026, 3:38pm UTC](https://community.failbettergames.com/t/spam-update-normal-service-resumed/27373/8 "2026-10-14T15:38:14Z")

</div>

I’m on Firefox, too, so I didn’t see any spam at all, just that one page that told you to set up two-factor authentication. I did find the whole thing a wee bit weird and didn’t click on anything, thought I’d wait for a day or two whether something would change. Nice to see my bullshit sensors still working.

---

<div class="post-metadata">

**Author:** ![TheJillyFleurian](https://community.failbettergames.com/letter_avatar_proxy/v4/letter/t/7cd45c/32.png) [@TheJillyFleurian](https://community.failbettergames.com/u/TheJillyFleurian)\
**Post date:** [October 14, 2026, 6:55pm UTC](https://community.failbettergames.com/t/spam-update-normal-service-resumed/27373/9 "2026-10-14T18:55:01Z")

</div>

Chrome had me locked on the two factor authentication page…glad to see it got fixed!

---

<div class="post-metadata">

**Author:** ![rubyhooko](https://community.failbettergames.com/letter_avatar_proxy/v4/letter/r/4bbf92/32.png) [@rubyhooko](https://community.failbettergames.com/u/rubyhooko)\
**Post date:** [October 14, 2026, 7:46pm UTC](https://community.failbettergames.com/t/spam-update-normal-service-resumed/27373/10 "2026-10-14T19:46:40Z")

</div>

Clicked in around the time of the attack, it was awful to see boring travel forum reality storming the world over here. So sorry you’ve had to deal with it and well recovered! 👏

---

<div class="post-metadata">

**Author:** ![phryne](https://community.failbettergames.com/user_avatar/community.failbettergames.com/phryne/32/16023_2.png) [@phryne](https://community.failbettergames.com/u/phryne)\
**Post date:** [October 21, 2026, 8:03pm UTC](https://community.failbettergames.com/t/spam-update-normal-service-resumed/27373/11 "2026-10-21T20:03:59Z")

</div>

Now I wonder whether the timing of this attack was coincidental… or whether we’ve seen a PHP2Shell preview.

---

<div class="post-metadata">

**Author:** ![stuartfbg](https://community.failbettergames.com/user_avatar/community.failbettergames.com/stuartfbg/32/1020_2.png) [@stuartfbg](https://community.failbettergames.com/u/stuartfbg)\
**Post date:** [October 21, 2026, 9:10pm UTC](https://community.failbettergames.com/t/spam-update-normal-service-resumed/27373/12 "2026-10-21T21:10:50Z")

</div>

Don’t worry, Discourse, the forum software, doesn’t use PHP. And it was not hacking exactly, just someone automating sign ups.
