Hacked

[Prince]

Someone keep attacking my forum and he edit all the posts to adult content.

He enter as a any user and do what I said above

How this happen?

what should be done to stop that?

I already restored backup of my database.

Prince Reviewed by Prince on 10th Apr 2008. Hacked Someone keep attacking my forum and he edit all the posts to adult content. He enter as a any user and do what I said above How this happen? what should be done to stop that? I already restored backup of my database. Rating: 5

[Prince]

IPB can take my license down because I'm warez forum you know and this against their TOS.

I added ACP security mod to prevent anyone access my ACP.

He didn't changed FTP and control panel passwords, he was playing on the site itself.

How I prevent anyone from screwing up my database

What needed permissions need to SQL database user, may be I set it have not needed permission.

[Ak47]

Check your moderator logs for the posts the hacker edited and block the ip froma accessing your board and server. And never ask IPB, they took down my site for having warez... Just try finding out the IP's and blocking them.

[Prince]

Thank you Ak47, I known that IPB take off because I read their TOS carefully.

Does anyone have a firewall script, let you protect your SQL.

[Baby Jesus]

I'd add a .htaccess login to your admin folder (I haven't used IPB in a long time but I assume the admin control panel has it's own folder, no?), then you're pretty much safe... Not much they can do unless they have a higher level of access such as ssh, ftp, etc.

[Ak47]

What Baby Jesus said is correct, password protect the admin folder directory via cpanel/or whatever control panel you have. The directory will be something like:

http://www.yourdomain.com/admin/

[Prince]

Thanks for advices

These people post RapidShare phishers in my forum and it seems banning them pissed them off.

It was a war from two days ago, on taking the control on the forum.

They banned me and I returned myself by playing in mysql and banned them all and their IPs.

Actually they failed to take control, so they played on SQL as I did. :mad:

But Cpanel do daily backups so all they done is undone.

I added tougher protection, I added .htaccess with deny all IP except mine.

Google it for more info on how you do it, added very tough protections on ACP.

Last thing need new Firewall script to prevent SQL injection, it seem IPB latest version don't beat it.

[Ak47]

I added .htaccess with deny all IP except mine.

to the admincp or whole site? lol

[Golden Falcon]

to the admincp or whole site? lol
[/color]

whole site would have been funny..

Member: wtf, no one can see the site
Admin: working fine for me o.O?

[Prince]

To ACP of course, the attacks is killed away, I guess they do DDos only now.
It seems it was security holes in the php and mysql on the previous host.
I moved to new one and everything is fine so far.