Warning to FlashChat users - security hole

[steven s]

Flashchat updated to 4.70
http://forum.tufat.com/showthread.php?t=24971

[yesfans]

Originally Posted by JGM007

I was running flash chat and was not as lucky as most people when I was hit yesterday. The message board was the only thing left, the index file for that had been replaced with something to the effect HACKEYD BY STOUNE!!! and a link to http://stounee.ifrance.com/

I went to replace the index file and found every single other directory and file was gone! for some reason they left the board though.
The web host did have a recent backup for me thankfuly, but at a price of course.
I ended up dumping my whole vB directory and upgrading to 3.6 and changed passwords on everything.

I am with asmallorange.com and can say nothing but FINE thing for this host. They have great tech help 24/7 via email and don't charge for help. They have bailed me out of many problems. I have a dedicated server with them!

[DudeSicko]

Originally Posted by The Finman

{meta} >>>> {http-equiv} "Refresh" """"

That will put an end this nonsense.

Thats all you have to do to stop the hacking?

[steven s]

Originally Posted by DudeSicko

Thats all you have to do to stop the hacking?

That has nothing to do with Flashchat.

Hit with this as well about a month ago, my host recommended installing mod_security in php as another means of preventing it.

[Marco van Herwaarden]

Problem with mod_security is that you can also break a lot of things (including vBulletin) if you don't know what you are doing.

Agreed. I did a decent amount of RTFM'ing before dropping it on, and so far no issues.

[AyeCapn]

I'm about to install FC 4.7.5. IS this still an issue?

[Paul M]

This issue is long dead, it was fixed in Flashchat 4.6.2

[wobbly]

No it isn't bud. I got hacked last weekend using latest vb 3.62 and latest flashchat.

found that they had uploaded loads of ftp cgi scripts etc and were well on their way to trashing my site. My host found the activity going on and shut down my site.