Icy Phoenix

Old Bugs - Someone Keeps Hacking My Site

magma [ Thu 14 Sep, 2006 12:10 ]
Post subject: Someone Keeps Hacking My Site

I still don't know how they can do, but they do.

Someone can write a file index.html on my webspace probably because of some vulnerability.

I applied patches 004 and 006, i will also try the others but don't know if it will be useful, because the hacker also cracked XS1.
Then I update to the latest XS2 version (058) but the problem remains.

Do you know about this: http://secunia.com/advisories/21841

Bye and thanks for any suggestion.

p.s.: I exclude ftp password bruteforcing.

Mighty Gorgon [ Thu 14 Sep, 2006 12:50 ]
Post subject: Re: Someone Keeps Hacking My Site

If you have applied the modifications to HTACCESS as suggested in PATCHES section you should be safe...

Anyway, for that exploit it should be enough using this on top of your functions.php:

Code: [Hide] [Select]

if ( !defined('IN_PHPBB') )

{

	die("Hacking attempt");

}

magma [ Thu 14 Sep, 2006 13:48 ]
Post subject: Re: Someone Keeps Hacking My Site

Mighty Gorgon wrote: [View Post]
If you have applied the modifications to HTACCESS as suggested in PATCHES section you should be safe...

Anyway, for that exploit it should be enough using this on top of your functions.php:

Code: [Hide] [Select]
Code: [Show]
if ( !defined('IN_PHPBB') )
{
die("Hacking attempt");
}

I haven't tried .htaccess modifications ... what do you suggest to do? Doing both?

Thanks a lot for support.

magma [ Thu 14 Sep, 2006 15:05 ]
Post subject: Re: Someone Keeps Hacking My Site

I did both the patches ... now crossing my fingers...