my board got hacked

[pHAZE_1]

its down right now and i have an idea of who it was.. but what can i do about them? also is there a type of firewall or some other software i can use to prevent that from happening again?

[hypedave]

were you hosting the forum on your own or using a hosting company ?

[pHAZE_1]

company

[The Prohacker]

Also, did they mess with the files or just posts and stuff??

Are the DB tables in tact????


Once you get your board back up, try looking at admin logs before you restore anything....

[hypedave]

can you give us a better idea of what happened, with you saying its down right now, I could easily say that maybe the hosting company restarted services or connection got damaged

[pHAZE_1]

i dunno about tables or the files.. i took my board down

you go into the forums home page and everything is fine, you click on a forum, a link, a thread, a post, etc (not every time) and you get a pop up and the pop up says dumb things, but the only thing you can do is say OK (continous link of pop ups), you cant click any where else on the screen and you have to either restart you computer or hit ctrl alt delete and close your inet service.. it seems everything is intact, but im nore sure

[Wayne Luke]

Bummer... You mean they got the HTACCESS password that you use to protect your Admin directory with and then got the unrelated password that you use for your Admin account?

[pHAZE_1]

Originally posted by wluke
Bummer... You mean they got the HTACCESS password that you use to protect your Admin directory with and then got the unrelated password that you use for your Admin account?

i dont have a clue what you said

[Wayne Luke]

HTAccess is an authorization method to allow you to protect your admin directory. This means even if someone were to get your Admin password, it would still be protected.

Try it...

http://www.sitepointforums.com/admin/

You will have to enter in 2 distinct passwords. One for simple access to the server itself and another to access the control panel. Neither are related nor are they dictionary words. In fact ones is over 15 characters and the other is over 20 and both are random gibberish with a combination of numbers, letters and punctuation.

If your host provides you with CPANEL, you can set it up on your site by clicking on "Web Protect". If they don't, contact them about setting it up.

[Jake Bunce]

i clicked on your www link and all your php files are gone. all you have is:

web root -> forum -> images

all your images are there but the other files aren't. did some one get into your ftp and delete stuff? how do you know some one hacked your forums? they wouldn't be able to delete your php files through your admin cp. or did you delete the php files?

you just need to restore your files and a backup of your database (if posts were deleted or the database was compromised in any way). then change your ftp password, vB admin password, database password, etc. also make sure you are running the latest version of vB.

[pHAZE_1]

i deleted all my files just incase, but i found out how the ****er did it.. problem solved now

[Dave#]

i deleted all my files just incase

[Raz Meister]

How?

[DirectPixel]

Originally posted by Dave#

True... why on earth would you delete your files if somebody hacked you?

*refers Xiphoid here to handle this situation...

[pHAZE_1]

before i knew what he did, i thought he hacked the files and to prevent from further hacking i removed them from my server. dont ask why, i dont know either, just thought it would help. any way my problem is solved now, no need to keep responding, but thanks for your help people