IP Banned Me

[agitated]

I had a look at the forum before you disabled it and unfortunately it looked as if they had removed your admin status.
This means that even if you manage to log in, you'll not be able to get into the ACP.

I'd consider submitting a support ticket at vBulletin.com

[snunhuck]

I see you got the forum back?

[DivisionByZero]

when you do get back up, do this:

add an .htaccess file in your vBulletin attachments directory with the following in it:

<Directory /this/directory>
Options None
AllowOverride None
</Directory>

This will prevent rogue scripts from being uploaded as attachments and then executed. This CAN be done, despite what anyone thinks they know

[ownerblade]

Yay, I have hacked back my website as I used tools.php and made my friend a super admin. He un ip banned me and the website is back up. I changed the name of index.php to secret.php the whole time so no one could get onto the website in between the times I was fixing it.

[DivisionByZero]

changing index.php does no good. you can still call any file directly.

I really REALLY ReAlLy need to write a security tutorial article here.

[ownerblade]

Please write one....

--------------- Added [DATE]1206128164[/DATE] at [TIME]1206128164[/TIME] ---------------

The guy is saying to everyone that I am nullified...

[snunhuck]

I know - and I've asked vb to check it out to prove them wrong.

[DivisionByZero]

what i would do right now (and i mean right now) is the following:

1. change any control panel passwords
2. change any FTP passwords
3. change your mysql username and password that's in the config.php script
4. COMPLETELY DELETE ALL FILES from your webroot directory and reupload all your vBulletin files and any mod files you have.

[ownerblade]

They never got my password for ftp.... Is there a 24/7 service for vBulletin? I want to talk to them....

[snunhuck]

I know they do have a service: but you'd better send a support ticket if you don't live if Canada - where is theor phone number?