Go Back   vb.org Archive > Community Central > Community Lounge
FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools Display Modes
  #1  
Old 07-06-2002, 08:29 PM
Chris M's Avatar
Chris M Chris M is offline
 
Join Date: Dec 2001
Location: Northampton, England
Posts: 6,186
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default OH NO...Not again!!!!

Excuse the fained swearing, but F***ING HELL!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Sorry...

I am sorry about that, but we have had another bloody annoyance...

Our rogue Webmaster hacked into one of the Admin accounts, and deleted :

over 100 users
the entire templates
half the database
over 10000 posts worth, contained in 10 forums

He also attempted to delete the Webmaster account (me), and the Owner's account, but thanks to my previous hack, he was unable to...

What, in your opinion, is the best course of action to take?

Satan
Reply With Quote
  #2  
Old 07-06-2002, 09:02 PM
Steve Machol's Avatar
Steve Machol Steve Machol is offline
 
Join Date: Nov 2001
Posts: 1,896
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

The 'best' course of action is to have only one Admin. Good luck!
Reply With Quote
  #3  
Old 07-06-2002, 09:39 PM
Chris M's Avatar
Chris M Chris M is offline
 
Join Date: Dec 2001
Location: Northampton, England
Posts: 6,186
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Well...

Maybe that is a future endeavour...

Thanks anyway...Grrr...

The Stupid little *BLEEP*

Satan
Reply With Quote
  #4  
Old 07-06-2002, 10:00 PM
Boofo's Avatar
Boofo Boofo is offline
 
Join Date: Mar 2002
Location: Des Moines, IA (USA)
Posts: 15,776
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

That is not only the best course of action to take, but also the only true safe and sensible one. If he is still hacking in after you have re-installed fresh and changed all the passwords (including FTP) then I would look at maybe it being an inside job aimed at the "rogue" as you call it. I don't see how he could be getting in if you guys aren't giving him a way to do it.
Reply With Quote
  #5  
Old 07-06-2002, 10:21 PM
afterlab's Avatar
afterlab afterlab is offline
 
Join Date: Oct 2001
Location: Dallas, TX
Posts: 327
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Ahha. I had something happen to me similar to this. Well I learned, now you need to. Learning can't really come without pain.
Reply With Quote
  #6  
Old 07-06-2002, 10:26 PM
Velocd's Avatar
Velocd Velocd is offline
 
Join Date: Mar 2002
Location: CA University
Posts: 1,696
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Ouch..that really sucks considering this is the second time it's happened. Hopefully you made backups, as you always should.
Reply With Quote
  #7  
Old 07-06-2002, 10:30 PM
Xenon's Avatar
Xenon Xenon is offline
 
Join Date: Oct 2001
Location: Bavaria
Posts: 12,878
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

secound?

i think its the forth time....

best tip is what smachol said
just 1 admin is needet at one board, two if there are two owners, but none more
Reply With Quote
  #8  
Old 07-06-2002, 10:50 PM
Chris M's Avatar
Chris M Chris M is offline
 
Join Date: Dec 2001
Location: Northampton, England
Posts: 6,186
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Well...

I am considering there just being me (the Webmaster), and the Owner...

I think it is safest...

And it was technically an Inside Job - The Rogue guy hacked into one of our Admin's accounts...

We know it wasnt that Admin, cos his Ip is from an Irish Company, and the Rogue's comes from an Company located in New Jersey...

Xenon - I think this is only the first time we have been Hacked...

This is the third time we have been taken down by that guy though...

The first time he was trying to do a hack, and couldnt correct his mistake, and the Second time, as most of you know, was when he went totally Awall...

Well - At least my latest hack proved useful - he tried to delete userid = 1 (me) 11 times

@VeloCd - We got the Hosts to make backups daily for us...Its all a matter of time before they upload the one from July 5th (cos July 6th's would be done around about now, which is no good)...

Thanks for the support guys...Luckily, we are left with a working board and infrastructure, thanks to the sharp eyes of one of my Friends...

Satan
Reply With Quote
  #9  
Old 07-07-2002, 01:11 AM
E's Avatar
E E is offline
 
Join Date: Mar 2002
Location: Fieldale Virginia
Posts: 421
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

well.. for the template problem, make it so only u and the owner can access the templates, i dont see why other admins would need to anyway
Reply With Quote
  #10  
Old 07-07-2002, 06:21 AM
SaintDog SaintDog is offline
 
Join Date: Nov 2001
Location: Tennessee
Posts: 1,975
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Your host should have a backup, why not ask them about restoring it to before things were deleted? It can not hurt to ask, I am sure they would be willing to help you out as much as possible .

- SaintDog
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 05:28 AM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2024, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.04471 seconds
  • Memory Usage 2,248KB
  • Queries Executed 11 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (1)pagenav_pagelink
  • (10)post_thanks_box
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (10)post_thanks_postbit_info
  • (10)postbit
  • (10)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete