[o0Hubba0o]

Originally Posted by syrus.xl

My site was hacked through vbShout this evening. A new member joined and posted code numerous times, which caused a directory popup box to appear, asking for username and password.

that's the same thing that happened on mine, some users were able to get a word in here or there, but I had to ctrl/alt/del and shut down my browser through there.

I noticed that people who hadn't confirmed their emails could use the shoutbox (such as this freeze fellow), so I added that user group to the unable to use option. I also added freeze to the names not allowed on registration heh, because after I banned him he re-registered and had a completley different ip but still used freeze in his name.


I don't know what he typed in the shoutbox because I pruned it as soon as i could, the last thing I seen him say was daaaaaaaannnngeeeeeeerrrrrrrrrr