Icy Phoenix

I still don't know how they can do, but they do.

Someone can write a file index.html on my webspace probably because of some vulnerability.

I applied patches 004 and 006, i will also try the others but don't know if it will be useful, because the hacker also cracked XS1.
Then I update to the latest XS2 version (058) but the problem remains.

Do you know about this: http://secunia.com/advisories/21841


Bye and thanks for any suggestion.

p.s.: I exclude ftp password bruteforcing.

If you have applied the modifications to HTACCESS as suggested in PATCHES section you should be safe... :roll:

Anyway, for that exploit it should be enough using this on top of your functions.php:

Mighty Gorgon wrote: [View Post]

If you have applied the modifications to HTACCESS as suggested in PATCHES section you should be safe... :roll:

Anyway, for that exploit it should be enough using this on top of your functions.php:

Code: [Download] [Hide] [Select]

Code: [Download] [Show]

if ( !defined('IN_PHPBB') )
{
die("Hacking attempt");
}

I haven't tried .htaccess modifications ... what do you suggest to do? Doing both?

Thanks a lot for support.

I did both the patches ... now crossing my fingers...