So, recovering from being hacked questions

[Keesa]

We were recently hacked. To resolve the issue some of the templates and pages in our vBulletin had to be pulled down.

Some were pages related to Mods, others were things as simple as an added page to vBulletin with outgoing links.

My questions are these:
How does one know if a Modification can increase the chances of being hacked?
If our forum, because of our topic, is subject to being targeted for hacking again, should we refrain from using ANY Modifications at all?

Or is it just dumb luck that the hacker got in and the files that they planted their evil code on were just chance?

If there are particular templates that the hacker got, does it mean THOSE modifications are how they got in?

There are a couple of Mods that are like water in a starving desert and I really really want to put them back in, and would be willing to give up others to keep them, but I do not want to put the forum at risk.

So, can someone help me understand?

Is the only safe forum a completely UNmodifed one? Well, safer forum? I imagine none are safe.

[cono1717]

Any mods that you have installed from vBulletin.org should be safe, if you believe they are not report it and the staff will test it, all users that have installed that mod will then be emailed informing them of a security hole in the mod.

[Lynne]

Originally Posted by cono1717

Any mods that you have installed from vBulletin.org should be safe, if you believe they are not report it and the staff will test it, all users that have installed that mod will then be emailed informing them of a security hole in the mod.

Well, don't just go reporting every modification. We look at mods when users point to certain parts in the code that they feel is unsafe - like queries where the variables were not run through the cleaner. We aren't going to go through every line of code just because someone reports it saying "gee guys, is this safe?"

Check to make sure you are using the latest versions of your modifications. Do you mark Install on your mods? If so, if there is a security problem, then you should receive notification about it. Go read the thread of all your mods and see if anyone has mentioned any problems regarding them.