The Arcive of Official vBulletin Modifications Site.It is not a VB3 engine, just a parsed copy! |
|
#1
|
||||
|
||||
![]()
Hi , I come home this afternoon to find that someone has changed my admin password and is logged in with it. Immediately I thought it was because I've had html enabled on my board , so the first thing I did was to de-activate it in each forum on there and disable it from signatures.
Is there anywhere else that I can / should disable it from ? I'm kinda lost here on this one , never thought I would have that problem , but here it is. any help and suggestions appreciated. |
#2
|
||||
|
||||
![]()
What version are you using?
What hacks do you have? Do you have other admins? Is you admin account unchangeable by other admins? HTML is a bad idea as some code can be used to harvest cookie passwords. |
#3
|
||||
|
||||
![]()
What version are you using? 2.2.6
What hacks do you have? LeSane's Store - vbquiz - awards hack for store - arcade Do you have other admins? yes Is you admin account unchangeable by other admins?no HTML is a bad idea as some code can be used to harvest cookie passwords. |
#4
|
||||
|
||||
![]()
upgrade immediately to vb2.3.2, as there are a lot security holes below 229.
Update the Storehack, too. There was also a big security hole in the old versions. |
#5
|
||||
|
||||
![]()
.htaccess your admin directory too
![]() |
#6
|
||||
|
||||
![]()
.htaccess completed
and get this , the guy just did it AGAIN but I caught how he did it : through a donation in the store if I upgrade the store , will it patch that ??? |
#7
|
||||
|
||||
![]() |
#8
|
||||
|
||||
![]() Quote:
There are other possibilities, too, so you should really upgrade the whole board |
#9
|
||||
|
||||
![]()
k , well , in process of entire upgrade now.
|
#10
|
||||
|
||||
![]()
There you go.
![]() ![]() |
![]() |
|
|
X vBulletin 3.8.12 by vBS Debug Information | |
---|---|
|
|
![]() |
|
Template Usage:
Phrase Groups Available:
|
Included Files:
Hooks Called:
|