vb.org Archive - Hacked again...

Page 3 of 4

Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- Modification Requests/Questions (Unpaid) (https://vborg.vbsupport.ru/forumdisplay.php?f=112)

- - Hacked again... (https://vborg.vbsupport.ru/showthread.php?t=42464)

Dark_Wizard

08-19-2002 01:36 PM

Send me your global and functions files...

Boofo

08-19-2002 06:50 PM

And how would I do this on a Linux server? I know absolutely nothing about .htaccess. :)

Quote:

Originally posted by NTLDR

The safest option though is to put the entire admin directory behind a .htaccess block and uses a different username / password combo then you do for your forums.

NTLDR

08-19-2002 06:57 PM

Firstly, create a file inside you admin directory called .htaccess with the following content:

Code:

AuthUserFile path-to-admin-dir/.htpasswd

AuthName "vBulletin Administrator Control Panel"

AuthType Basic



<Limit GET POST>

require valid-user

</Limit>

Change path-to-admin-dir to the path to the admin directory on the server, and then create a file called .htpasswd and visit: http://www.xs4all.nl/~remcovz/htpasswd.html to generate what you should put in this file.

You will then be prompted with a popup security box that you have to enter the username and password before any files in the admin directory can be viewed.

Boofo

08-19-2002 07:16 PM

Would the path to the admin dir just be "admin" then?

Quote:

Originally posted by NTLDR
Firstly, create a file inside you admin directory called .htaccess with the following content:

Code:

AuthUserFile path-to-admin-dir/.htpasswd AuthName "vBulletin Administrator Control Panel" AuthType Basic <Limit GET POST> require valid-user </Limit>

Change path-to-admin-dir to the path to the admin directory on the server, and then create a file called .htpasswd and visit: http://www.xs4all.nl/~remcovz/htpasswd.html to generate what you should put in this file.

You will then be prompted with a popup security box that you have to enter the username and password before any files in the admin directory can be viewed.

NTLDR

08-19-2002 07:53 PM

No, it needs to be the full path on the server, if you don't know that path, visit member2.php in your forums directory, this will give you a fatal error and the path to member2.php.

If you replace member2.php with admin thats the path to the admin directory ;)

Boofo

08-19-2002 08:14 PM

I tried that and all I got was a blank page with the word "done" in the status bar. :)

Would it be the same path as for my FTP?

Quote:

Originally posted by NTLDR
No, it needs to be the full path on the server, if you don't know that path, visit member2.php in your forums directory, this will give you a fatal error and the path to member2.php.

If you replace member2.php with admin thats the path to the admin directory ;)

Erwin

08-19-2002 10:10 PM

Ahhh... never leave your debug on ever...

NTLDR

08-19-2002 10:28 PM

Quote:

Originally posted by Boofo
I tried that and all I got was a blank page with the word "done" in the status bar. :)

Would it be the same path as for my FTP?

They must have changed it since 2.2.4 :(

This should work, visit admin/index.php?action=phpinfo and search for DOCUMENT_ROOT that gives the path to the root of your domain, ie www.yoursite.com, then just add the path to the forums admin after it, eg /forums/admin

Boofo

08-19-2002 10:32 PM

LOL This just isn't my day. :)

It tells me NO Value on that. :)

Will this work?

Code:

http://www.bearfacts2.com/forum/admin?

Link14716

08-19-2002 10:43 PM

how about this.
at the end of the first line of one of the index.php's, add some random characters. Upload it and run it. It will give you the path to the file

All times are GMT. The time now is 01:28 AM.

Page 3 of 4

Show 40 post(s) from this thread on one page

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01953 seconds Memory Usage 1,737KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (3)bbcode_code_printable (4)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (3)pagenav_pagelink (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: