Go Back   vb.org Archive > vBulletin 3 Discussion > vB3 General Discussions

Reply
 
Thread Tools Display Modes
  #1  
Old 09-22-2007, 07:21 PM
Memphis834@yaho's Avatar
Memphis834@yaho Memphis834@yaho is offline
 
Join Date: Jun 2007
Location: Massachusetts
Posts: 58
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default My site got Hacked...

My site got hacked by a member on another forum that doesn't like my site for some reason. Now I lost everything

*Cries*
Reply With Quote
  #2  
Old 09-22-2007, 08:36 PM
bigcurt's Avatar
bigcurt bigcurt is offline
 
Join Date: Nov 2004
Location: KierDarby.php
Posts: 1,009
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Sorry to hear that bud; the same basic thing happened to me a while back but it wasn't exactly a "hack" per say.
Reply With Quote
  #3  
Old 09-22-2007, 08:41 PM
Memphis834@yaho's Avatar
Memphis834@yaho Memphis834@yaho is offline
 
Join Date: Jun 2007
Location: Massachusetts
Posts: 58
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I'm not really sure how the hacker pulled this off. Apparently he first deleted all the admins, then the smods, then changed my banner to read the name of the other forum, then deleted everything on my site and finally made it so that all you can see is a message where he says that he hasn't hacked a site in awhile but took a lot of pleasure in hacking my site. He listed the email addresses of all the members of my site on the page saying to spam them, and stated that everyone should join his anime site.
Reply With Quote
  #4  
Old 09-22-2007, 08:52 PM
Paul M's Avatar
Paul M Paul M is offline
 
Join Date: Sep 2004
Location: Nottingham, UK
Posts: 23,748
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Do you not have backups ?
Reply With Quote
  #5  
Old 09-22-2007, 08:54 PM
Freesteyelz's Avatar
Freesteyelz Freesteyelz is offline
 
Join Date: Jan 2006
Posts: 1,552
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

1. Check your database.

2. In FTP check to see if any of the core vB files have been compromised. Did you lock any User ID in the /includes/config.php from being modified or deleted? Check to see if of any additional files (that you did not upload).

3. Gather a list of all mods you've installed and any code changes you've made.

4. Did you enable HTML anywhere?

5. How many admins do you have that have access to the Admin CP?

6. Issue a support ticket to vB, give them the information and go from there.
Reply With Quote
  #6  
Old 09-22-2007, 10:00 PM
iogames's Avatar
iogames iogames is offline
 
Join Date: Jan 2007
Location: Las Vegas, NV.
Posts: 1,433
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by Paul M View Post
Do you not have backups ?
Why we don't have a SECTION or SubForums regarding to safety?

I've been told that is relatively easy to hack/stole some passwords...
I got everything:
- .htaccess/.htpasswd
- MySQLs BackUps
- Full Backups
- Protected users on Config.php, etc...

But I know a guy who threatens me to hack my site because he wants to charge me 350 usd for 3 hrs work! [I didn't request the changes, can prove it!]
Reply With Quote
  #7  
Old 09-23-2007, 12:29 AM
nexialys
Guest
 
Posts: n/a
Default

regarding security, we have the whole vBulletin Documentation on vBulletin.com ... why duplicate it here when the goal of this site is hacking??
Reply With Quote
  #8  
Old 09-23-2007, 07:11 AM
dbirosel dbirosel is offline
 
Join Date: Feb 2007
Location: San Diego
Posts: 587
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Can anyone post a link on how to avoid being hacked? I know to backup everything, but how often should I backup? What else besides backing up my files and database?
Reply With Quote
  #9  
Old 09-23-2007, 07:26 AM
Marco van Herwaarden Marco van Herwaarden is offline
 
Join Date: Jul 2004
Posts: 25,415
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Please read the following thread on how to improve security for your board:
http://www.vbulletin.com/forum/showthread.php?t=194701
Reply With Quote
  #10  
Old 09-23-2007, 07:51 AM
Dean C's Avatar
Dean C Dean C is offline
 
Join Date: Jan 2002
Location: England
Posts: 9,071
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

What he did is breaking the law, of course. Take action if he's in the same country as you. Long as you have evidence that it was him, he won't stand a chance
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 04:41 AM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2024, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.04337 seconds
  • Memory Usage 2,246KB
  • Queries Executed 13 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (1)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (1)pagenav_pagelink
  • (10)post_thanks_box
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (10)post_thanks_postbit_info
  • (10)postbit
  • (9)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_postinfo_query
  • fetch_postinfo
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete