Icy Phoenix

     
 


Post new topic  This topic is locked: you cannot edit posts or make replies. 
Page 1 of 1
 
 
Reply with quote Download Post 
Post Top Posters Security Issue 
 
Version: Icy Phoenix 1.1.0.15a

This week, somebody attacks my forum, and change the number of messages of two users. Then these two users became the top posters. I fixed this in ACP with a syncronization but i'm worried about what else can do these people...

There is a way to fix this security issue?
 



 
BladeKSend private message  
Back to topPage bottom
Icy Phoenix is an open source project, you can show your appreciation and support future development by donating to the project.

Support us
 
Reply with quote Download Post 
Post Re: Top Posters Security Issue 
 
BladeK wrote: [View Post]
Version: Icy Phoenix 1.1.0.15a

This week, somebody attacks my forum, and change the number of messages of two users. Then these two users became the top posters. I fixed this in ACP with a syncronization but i'm worried about what else can do these people...

There is a way to fix this security issue?


This will be fixed in next version of IP.
 




____________
? Zuker - EDDB - LPM - Sharefields
 
ZukerSend private messageVisit poster's website  
Back to topPage bottom
Reply with quote Download Post 
Post Re: Top Posters Security Issue 
 
BladeK wrote: [View Post]
Version: Icy Phoenix 1.1.0.15a

This week, somebody attacks my forum, and change the number of messages of two users. Then these two users became the top posters. I fixed this in ACP with a syncronization but i'm worried about what else can do these people...

There is a way to fix this security issue?

Why you think it is a security issue?

Are you sure values have been changed in the DB?

Can you show me a link of the problem you are having?
 




____________
Luca
SEARCH is the quickest way to get support.
Icy Phoenix ColorizeIt - CustomIcy - HON
 
Mighty GorgonSend private messageSend e-mail to userVisit poster's website  
Back to topPage bottom
Reply with quote Download Post 
Post Re: Top Posters Security Issue 
 
sorry, when i did the syncronization and delete the problematic users, id didn't happen again. I mean, maybe this is not a "important security issue" but i think it is, the users were banned a couple of months ago, so i dont think this is an "accident".

I'll attach a screenshot of what happened

untitled.PNG
Description: Look the top 1. 
Download
Filename: untitled.PNG
Filesize: 161.68 KB
Downloaded: 242 Time(s)

 



 
BladeKSend private message  
Back to topPage bottom
Reply with quote Download Post 
Post Re: Top Posters Security Issue 
 
Did you check in the DB the post counter of that user?
 




____________
Luca
SEARCH is the quickest way to get support.
Icy Phoenix ColorizeIt - CustomIcy - HON
 
Mighty GorgonSend private messageSend e-mail to userVisit poster's website  
Back to topPage bottom
Post new topic  This topic is locked: you cannot edit posts or make replies.  Page 1 of 1
 


Display posts from previous:    

HideWas this topic useful?

Link this topic
URL
BBCode
HTML




 
Permissions List
You cannot post new topics
You cannot reply to topics
You cannot edit your posts
You cannot delete your posts
You cannot vote in polls
You cannot attach files
You can download files
You cannot post calendar events


  

 

  cron