Topic awaiting preservation: i got hacked..

.. by 'friendly' hackers .. apparently ...

anybody know where i should begin looking for this bug? (am also waiting on an email reply from the hackers.. hmmm...)

Upgrade to the newest version of your forum software.

Don't use PhpBB
It's famous, and whenever a security hole is disclosed, or if you don't keep it up to date, you can be sure some script kiddies will jump on you.

you're waiting on an email reply from the hackers........i don't think i would count on it

there were some issues with phpBB not long ago so they took the site down and redid phpBB from my uderstanding. I would certainly join the mailing list that way when a security issue is brought up, you can fix it right away with a patch.

there are a lot of hosts that wont even allow phpBB to be installed anymore. The last security hole was not really even their problem, it was a problem with php itself. They have it fix now though

Later,

C:\

quote:

---

...you can be sure some script kiddies will jump on you.

---

the bastards!

.. so i've downloaded patch files that will hopefully get things back to normal.

this'll teach me to stay on top of my maintenance chores. and maybe someday i'll get smart enough to work with more obscure forums than phpBB

quote:

---

Please ensure both the install/ and contrib/ directories are deleted

---

phpBB runs a good security mailing list, you should definitely get on it if your board is indexed by search engines!

a good looking up and coming BB is mybb, it's minimalistic but that could be a very good thing in my opinion

i think the hacks are everywhere .. not just in phpBB2 ... just noticed some permissions (chmod) in my gallery were changed as well ...

oh, and the upgrade for phpBB2 didn't fix the problem...

could it be they got into the server? what now?


<edit> trying not to panic </edit>

(Edited by LaSun on 03-26-2005 01:50)

Yom-yom-yooom, ze boards.

LaSun: Check in the admin panel of your board if the database is still ok, if there is a backup to restore or something like that. At worst, you'll have to re-install the board and clear the database.

Wierd I get the correct HTML when I view the source. Something over my head is happening there.



.:[ Never resist a perfect moment ]:.

You should contact the dotreg.com or onlinenic.com people and let them know illegalteam.com is up to some shadyness. They shouldn't be hosting something in a language they don't understand, anyways.

okay. i've done my yoga and breathing exercises, so i think i've safely dodged the anxiety attack, hehe.

the bastards have still got my forum, but i've backed up the database and upgraded the board. for some reason i can't get back into my admin panel (i'm working with the phpBB support forum to try and resolve that) so i can't tell yet whether my efforts will pay off.

it just so happens, though, that i was just about to shift the site to a new domain and webhost. i might as well use that exercise as an opportunity to inspect all my files for anomalies.

synax: you caught me mid-upgrade. no install/contrib there now.

JKMabry: i had a quick look at mybb. may just be worth further investigation. thanks for that.

reisio: i think i just might, though i've never come across such polite hackers. even left their url and email address.

(Edited by LaSun on 03-26-2005 04:48)

there's like a neverending supply of such idiot script kiddies - even in far away countries, it seems