Hrm, I found out how he was able to siphon my password. He changed an admin's custom username and added a java script file using vb code tags. Since this admin has a post in just about every thread, nothing was left untouched. I have not gone to drastic measures in restoring my site yet since I am working with my provider to lure him in for more hacking...
I still don't know how he got in for sure, but I now suspect he obtained the password of a moderator that had gone inactive. Once in he inserted his little java trick in the signature he waited until he got an admin password. Once he got that he would have gone unnoticed for quite some time, but he got greedy and gave himself an avatar. Well, out of my 12,000 members only I have an avatar, so I knew immediatly something was wrong.
This is why I ban all AOL users
I had just moved to a new host last month, so I have not gotten around to restoring my htaccess stuff yet. This hacker was using an AOL account
08-04-2005, 03:08 AM
Hybrid Mode
