Posted 01 November 2006 - 09:51 PM
Well, Sunday night we got hacked and the front page of ProivRC was defaced.
Initially, I thought it was just that, but after a bit of looking around I noticed that someone had managed to install scripts to allow them to access my server via PHP.
This is why I took the site down as I could not verify 100% everything in every dir.
I presume they got in because I was running a fairly old version of the forum software, I wasnt particualy worried about it up till then because who is gonna hack a Proiv site!
However, obviously there are people with not much to do.
The IP originated over from Moldova, and I have contacted their ISP, but I dont expect much back from them.
Since the hack, I blocked the IP subnet that the user was coming in from, and in the last 3 days they have been trying to access the site again and looking for their scripts.
I've upgraded the software over the last 3 days to give us more security, something that I had been testing etc on another server for the last few weeks.
I have not been able to do everything I wanted, so I will continue to change stuff over the next few weeks.
Any questions just ask,
Posted 01 November 2006 - 10:52 PM
Kind of my own fault though for not keeping up with updates...
I'm normally over 'updating' on my PC, but you always learn the hard way.
But I just didnt expect a Proiv site to get hacked
Posted 02 November 2006 - 12:11 AM
Glad to have you back RC.
Reply to this topic
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users