Major Issue

[Memphis834@yaho]

Okay, earlier today before I left for work, my site had several apache messages pop up. I get home from work and try to log into my site and it says that I have the wrong password/username. Evedently any account that logs out, is now unable to log back in. All my users are getting the same "You've reached the password quota" message. So I'm assuming that once again, I've been hacked. Is there anyway that I can fix this problem asap?

this is related to the server, not the software... you will have to contact your host...

[Memphis834@yaho]

vb is just not all that secure. This is the second time this has happend. Right now it's escalated to the point where everyone is now IP banned and no one can even view the site. My server host's response:

hi there

is this still an issue? your website is active / online working very fast for us using the firefox / seamonkey browser;

http://nationofhiphop.net/

-----------------------------------------
You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so
-----------------------------------

Most hacks occur due to insecure PHP scripts, some code may have entered your website by a vulnerability in your scripts, please update your scripts to the latest versions and change your accounts password.

please look at the following articles:

http://www.google.com/search?q=mysql+injection
http://en.wikipedia.org/wiki/Cross-site_scripting
http://www.google.com/search?q=php+s...ulnerabilities

regards

Whatever, guess there's nothing I can do as usual.

[Marco van Herwaarden]

What is your setting for:

AdminCP -> vBulletin Options -> Server Settings and Optimization Options -> Session IP Octet Length Check

[Memphis834@yaho]

Thanks for response Marco but atm, I'm banned from my own site. Can't even access the admincp. But I guess if I decided to make another site which I'm not sure of now (I'm a target for hackers for some reason and have had several sites hacked) I could keep that in mind. Thanks.

[y2ksw]

Are you locked out from your site or the forum only?

If it is the site, the server and/or your server account got hacked. If you can still access the forum pages, but can't login, your forum has been hacked.

In order to assist we need to know where you need help

[Memphis834@yaho]

I'm locked out of my forum as is every other member of the site. Any page you try to visit on the forum, it just says that you've been IP banned.

My host is terrible and took away my cpanel like 2 weeks ago. I've contacted them about it and they said the reason was because I didn't renew the domain name that they provided which imo is rather absurd. I said, alright, I'll renew the domain that I don't use in order to get my cpanel back. The sales team has still not let me gain access to my cpanel.

So byethost<<<

[y2ksw]

So this means you don't have even access to the database?

Well anyway this should do the job:

UPDATE setting SET value='0' WHERE varname='ipcheck' LIMIT 1;
UPDATE setting SET value='' WHERE varname='banip' LIMIT 1;

Please note that you may need to change also the datastore => options row, setting the above values accordingly.

Changing these values remove the IP ban, but the hacking damage may go further.

[Memphis834@yaho]

I have no clue what happened, but I just came home and went to my site and it's back. So this might have not been a hack job but rather my host just somehow messing up my site. But anyways, as always you guys are great and are willing to help. I appreciate it.

[SEOvB]

Originally Posted by Memphis834@yaho

vb is just not all that secure. This is the second time this has happend. Right now it's escalated to the point where everyone is now IP banned and no one can even view the site. My server host's response:



Whatever, guess there's nothing I can do as usual.

No, you're just not secure. vBulletin is only as secure as its admins/server.

I've been running vBulletin for over 3 years now, and never once been hacked.