Is this a possible hack??

[DreadsUK]

I've just had a message prompt on my forum saying that my password is over 180days old and i need to create a new one.

I didn't want to go ahead with that incase its a possible hacker attempting to gain access to my current passwords.

Is there a way i can disable the password update for my account.

It seems strange to me that an admin needs to be prompted to update a password

[ForceHSS]

That's default, you can disable it if needed, but its best to leave it for security reasons

[DreadsUK]

Originally Posted by ForceHSS

That's default, you can disable it if needed, but its best to leave it for security reasons

The default was set to '0' for all over usergroups accept for admin. someone has definitely changed it.

I changed it back to '0' so it doesn't take effect and got back in ok.

Now it seems someone has tried to log into the admin panel as i've just tried and its telling me this message

[Dave]

If someone tried to login into the admin panel, you should definitely consider securing your admincp and/or changing the directory.

[DreadsUK]

Originally Posted by Dave

If someone tried to login into the admin panel, you should definitely consider securing your admincp and/or changing the directory.

How do i do that?

[ForceHSS]

Originally Posted by DreadsUK

The default was set to '0' for all over usergroups accept for admin. someone has definitely changed it.

I changed it back to '0' so it doesn't take effect and got back in ok.

Now it seems someone has tried to log into the admin panel as i've just tried and its telling me this message

I was talking about the admin account what group are you talking about

[Dave]

Originally Posted by DreadsUK

How do i do that?

There are many ways:
- a .htaccess file in the admincp directory which has a list of allowed IP's.
- A mod like https://vborg.vbsupport.ru/showthread.php?t=312555
- Hardcoding an IP restriction in the index.php file of the admincp.

[ozzy47]

I would suggest this mod, https://vborg.vbsupport.ru/showthread.php?t=312555

No need to do it I'm the files.

[RichieBoy67]

Originally Posted by ForceHSS

I was talking about the admin account what group are you talking about

Hey, your supposed to be recuperating man!

--------------- Added 23 Jul 2014 at 12:36 ---------------

Originally Posted by ozzy47

I would suggest this mod, https://vborg.vbsupport.ru/showthread.php?t=312555

No need to do it I'm the files.

I know you do this stuff alot but wow! You finally turned into files? lol

Great mod btw!

I also use the admin firewall which lets certain ips in. That combo is rock solid.

[DreadsUK]

Originally Posted by Dave

There are many ways:
- a .htaccess file in the admincp directory which has a list of allowed IP's.
- A mod like https://vborg.vbsupport.ru/showthread.php?t=312555
- Hardcoding an IP restriction in the index.php file of the admincp.

How do i locate the ip addresses for people who have accessed/tried to access and Admin CP?