My Forum HACKED for the 3rd time.
 

Someone keeps on going onto the forum with my account even though I have changed my password to a 16 character password with words and numbers, AND passwords protected the site (admincp) via .htaccess.

Is there anyway i can stop this from happening? e.g. cmod admincp 000 to stop people from accessing the admin or will this give the site some problems which might require files in the admincp?

Please help a.s.a.p

this is impossible that you've been hacked that way... you may have something outside the server...

you have admins ?! moderators, supermods, etc... someone else have access to your computer, etc... these are always the same questions you have to answer...

there is not a single possible way to hack Bulletin the way you claim... so it's 100% on your side.

Do you allow ANY html ?

Ok thanks.

I do have super mods and moderators. I will have to remove some of them.

So this can't happen with even hack on the site? I only have the Arcade, Photopost and the last 5 stats (posts) on the main site.

I'm sure its all bee3n turned off. One sec though i'll just double check.

Just [HTML] on the Enabled Built-in BB Codes in the vb admin options. all the other html is turned off.

I still have the /install folder on my domain with all the upgrade.php files on will that be a security risk?

No, only the "install.php" does and even then it could only delete the database.

Which version of the arcade?

the latest one, i only installed last week but this has been happening for about 4 weeks now.

I would contact your host, its a good chance there is somthing being done on the server level, oir you have a torjan horse on your computer or somewhere in your network.

well i have heard of priv8 vbulletin exploits...

i know about some sql injection that affects all of vb2 systems what is the version of your board ?

VB 3.03

I have changed my password, chage the admin folder and password protected the admin area with htaccess password. I might do the same for the moderators area.

it sure have some piracy exploits over vb 2.x, that's one of the reasons upgrades exists... each time someone find a leak in the code, a patch is released, and there was none about that kind of exploit in the last 6 months...

Could someone please give the SQL code for changing my forums to not Allow HTML code in the forums. I think a few might be allowing html code on the forum but i want all of them to NOT allow it

Thanks in advance.

goto each forums permissions and disable HTML code :)

that's the hard way. I'll do it that way though as then i definately know myself that html is turned off on all the forum.

The all had HTML turned off.

Make sure HTML is turned off in PMs, Calendar Events, Signatures, and anywhere eles where it would be enabled. If it is all turned off, i would contact your host, as i don't see it being vB being hacked, but your never know, there could be an private injection that vB don't know 'yet'.

Yeah its all off. Im just waiting again for it to happen