Is this a possible hack??
 

I've just had a message prompt on my forum saying that my password is over 180days old and i need to create a new one.

I didn't want to go ahead with that incase its a possible hacker attempting to gain access to my current passwords.

Is there a way i can disable the password update for my account.

It seems strange to me that an admin needs to be prompted to update a password

That's default, you can disable it if needed, but its best to leave it for security reasons

The default was set to '0' for all over usergroups accept for admin. someone has definitely changed it.

I changed it back to '0' so it doesn't take effect and got back in ok.

Now it seems someone has tried to log into the admin panel as i've just tried and its telling me this message

https://vborg.vbsupport.ru/

If someone tried to login into the admin panel, you should definitely consider securing your admincp and/or changing the directory.

How do i do that?

I was talking about the admin account what group are you talking about

There are many ways:
- a .htaccess file in the admincp directory which has a list of allowed IP's.
- A mod like https://vborg.vbsupport.ru/showthread.php?t=312555
- Hardcoding an IP restriction in the index.php file of the admincp.

I would suggest this mod, https://vborg.vbsupport.ru/showthread.php?t=312555

No need to do it I'm the files.

Hey, your supposed to be recuperating man!:D

--------------- Added 23 Jul 2014 at 12:36 ---------------

I know you do this stuff alot but wow! You finally turned into files? lol

Great mod btw!

I also use the admin firewall which lets certain ips in. That combo is rock solid.

How do i locate the ip addresses for people who have accessed/tried to access and Admin CP?