As of today we have the following back online:

• All of the account section (history, billing info,redeeming points, etc)
  
• Report order problem via online
• Customer photos galleries
• Customer registration 

I have someone working on the filters now, because it's just too over my head. We are making progress but the filters are EXTREMELY complicated... I hope it all works out. One way or another we're gonna get them up.. I just hope it doesn't take longer than a couple of more days.

In the meantime while this other programmer is busting out of filters, I'm going to be focusing on the other pages at the site like Wishlists (tomorrow), and then any other small pages that need to be fixed.

 I would estimate outside of the filters, the site is about 65% done now :) Thanks for being so patient!

bodyartforms:

As of today we have the following back online:

• All of the account section (history, billing info,redeeming points, etc)
  
• Report order problem via online
• Customer photos galleries
• Customer registration 

whew !!!  i got a little spooked by the 'report-order-problem', but it looks like (geez what a pain that mustve been) that yall got all the orders sorted out from this past weekend.  THANK YOU !!!  if the reporting wasnt working, then it mustve been ugly to go back thru the logs to find the data...  bummers - sorry bout that.

bottom line - yall managed to find my order that i had (semi-purposefully, due to errors) that id submitted twice - so cool !!!

hopefully the rest of it all will not be too painful - and that the filters will get back online fairly soon...  that is such a bummer that yallve had to go thru this - but i can say that i DO appreciate all the work/effort that yall go thru.  thanx again.  :-)

I have no idea if this is helpful...my partner is a web developer, a good one who has worked on big business web based systems, and when I told him what you had written about the problem he said this:

Sounds like a SQL injection

If you are using 'GET' instead 'POST' to submit data to your database via a form it will allow people to inject code into your database

I am a major n00b when it comes to programming so I have no idea what any of this means, I am just regurgitating it as well as possible. I'm sorry this happened, it must be so stressful and I know you guys try so hard (successfully I believe) to make BAF the best online store possible and have put a lot of blood sweat and tears into the site lately. My commiserations 

 I noticed something a little funny with filters which may help... When I filter for only a brand, it says no results found, but if I add in a jewelry type, it works (well, if the selected brand makes stuff of the selected type lol)

yes it was SQL injection and our new site (which no one will notice a change except us) is secured to where that won't happen again (unless there's some hole we're missing). So we're gonna be good to go on that part :)

And yes, the filters right now are all screwy... we have something we're working on and hope to have it released tomorrow :)

Skinartia:

I can't access my Wish List. Is that still down, or am I the only one with this problem? :(

Unfortunately it's still down :( I've been working on getting the filters up for about 5 days now :( But the wishlist is at the top of my list.. i'm even gonna start on it tonight and hopefully get a little bit done on it.

 The wishlist page hasn't been taken back online yet. I really missed it when I put my last order together! lol

And I'm still glad there's at least some filtering at the moment! None at all made me sad (I like to browse lol)

Also, not really related to the whole attack thing, but I notice sometimes when the "my account" front page is loading, I see a total value of my orders, but then it goes away when the image/header for the "My discounts & credits" loads... I think it's the same counter that was there before I got my 10% discount... Could it be made to show order total value all the time? That would be neat. lol

 You can just roll over the little money bag and it'll show you the amount you've spent :)

 Oh dear, when I try to load the site this is all I get:

"Provider error '80004005'

Unspecified error

/index.asp, line 9"

 Oh noes! Me too!

"Microsoft OLE DB Provider for SQL Server error '80004005'

[DBNETLIB][ConnectionOpen (SECDoClientHandshake()).]SSL Security error.

/index.asp, line 9"

 Yep, I can't even load the site.

http://www.bodyartforms.com

 boots up:

Microsoft OLE DB Provider for SQL Server error '80004005'

[DBNETLIB][ConnectionOpen (SECDoClientHandshake()).]SSL Security error.

/index.asp, line 9

::EDIT::

Weird! The website loaded up properly RIGHT AFTER I posted this, literally, 2mins later...

Do you program, or wave a magic wand?

 :(

ADODB.Command error '800a0d5d'

Application uses a value of the wrong type for the current operation.

/checkout_step4_payment.asp, line 72

got this at the very last moment of trying to place an order just now, after waiting until the site was better and working with seth about the discount from halloween. tried it twice, same both times!

[:'(]

norikotheninja:

 :(

ADODB.Command error '800a0d5d'

Application uses a value of the wrong type for the current operation.

/checkout_step4_payment.asp, line 72

got this at the very last moment of trying to place an order just now, after waiting until the site was better and working with seth about the discount from halloween. tried it twice, same both times!

[:'(]

I'm so sorry :( Were you typing many comments in on checkout? That's the only error I can see on that line.. but it should allow you to type up to 750 letters into the comments box. One way or another we'll get this fixed :) Just lemme know.