Hacked

[BlueNinjaGo]

What add-ons did you have installed Powlo?

[Lynne]

Originally Posted by Shadab

Yep, plugin edits can be tracked this way; but this entry :

17838 Python 18:04, 19th Apr 2009 plugin.php productedit

corresponds to a whole 'product' edit; whose ID we *probably* can't track. As vB doesn't log it and moreover, that ID is sent via POST not GET; so the server access log can't see it too.

If you have the pluginid, you can figure out which product it is.

[Powlo]

There is nothing that i can find that relates to a plugin id, there are entries in the server logs but the dont tell me anything..

[19/Apr/2009:17:25:03 +0100] xx.xxx.xxx.xx - - "GET /forum/admincp/plugin.php?do=product HTTP/1.1" 200 53505 "http://www.xxxxxxxxxx.com/forum/admincp/index.php?do=nav"

[Lynne]

And you don't see anything in the Control Panel logs? Look for all entries in the plugin.php script. It should show pluginids there.

[Powlo]

All i get in the control panel logs is what i posted in post #18

Its a shame the plugins dont have 'last edited' feature. That way it would be clear where to start looking.

[Lynne]

I wonder if he deleted them. In my logs, if I view all logs for just plugin.php, it shows an entry for everytime I modified a plugin with the plugin id. Can you see a bunch of entries missing?

[BerndM]

Its a german site so i didnt fully understand all their responses

just post the responses, I can translate them.

[Powlo]

Well it was a few days ago now and it was in their shoutbox so i imagine they are gone now but i kinda got the jist of it and they're not worth repeating lol

Thanks for the offer

[Michael.A]

Originally Posted by Powlo

Which i guess is why you stayed a 3.7.5
So whats your advise MAD--DOG? You seem to know the score, what if anything can i do to prevent this?

i know one thing downgrade to 3.7.5, ..

[Wired1]

Mad Dog, what is your proof of that?