Icy Phoenix

Old Support Topics - Test If My Forum Is Vulnerable

tiolalu [ Mon 20 Nov, 2006 12:11 ]
Post subject: Test If My Forum Is Vulnerable

I want to test if my forum is vulnerable.
I want this because of:
- 275 Ataques Bloqueados
- http://miarroba.com/foros/ver.php?f...d=5659281&pag=2

The page shows how they try to broke my forum

. I don't know why people want to broke a forum...
Mine is this: http://v360.foroblogs.es
It's about the mobile motorola v360 and we have no enemies

, all people can do everything, there are no fights (well ok, one time because of football).
The forum is Xs 0.58, and I think I applied all patches.

I have created a test user of anybody want it. User: test Pass: test

How can I test the security of it?

Thanks

Mighty Gorgon [ Tue 21 Nov, 2006 03:11 ]
Post subject: Re: Test If My Forum Is Vulnerable

If your hosting support HTACCESS and you have the latest HTACCESS from 058b, your site should be quite safe.

tiolalu [ Tue 21 Nov, 2006 10:37 ]
Post subject: Respuesta: Test If My Forum Is Vulnerable

Ajá, Ok, I will try to put it, because it's an expediente X. By FTP I cannot see the htaccess, but if I put it on root path the FTP eat it xD.

Thanks MG!

Xusqui [ Wed 22 Nov, 2006 22:24 ]
Post subject: Respuesta: Test If My Forum Is Vulnerable

Try changing the ftp client... Maybe flashftp, ie.

moreteavicar [ Thu 23 Nov, 2006 18:29 ]
Post subject: Re: Test If My Forum Is Vulnerable

If you have applied the latest patches to 014, you do not need to worry about htaccess working or not. The perl hack listed there relies on a simple injection in bb_usage_stats/includes/bb_usage_stats.php, which has been fixed in the patches.

tiolalu [ Thu 23 Nov, 2006 23:59 ]
Post subject: Respuesta: Test If My Forum Is Vulnerable

Yep, all patches have been installed, and I have verified that .htaccess is also changed

Thanks to all.

Now, when I have a little bit of time I will update CTracker to last version.