phpbb forum got hacked.. crap - GoFuckYourself.com

Amnesic · 08-15-2006, 10:43 AM

I had last update.. I don't know what happened..

Any idea?

sundown · 08-15-2006, 10:47 AM

Was there anything else on the server? Are you sure it was phpbb? Not saying phpbb is super-secure, just wondering.

What are you going to replace it with?

Amnesic · 08-15-2006, 10:48 AM

yeah it was phpbb.. and there was no other script on the virtual account. The server is runing phpsuexec too..

free4porn · 08-15-2006, 10:50 AM

strange, hope you find the cause

StuartD · 08-15-2006, 10:51 AM

phpbb should be renamed "hole in a server"

Amnesic · 08-15-2006, 10:53 AM

what a crappy application.. any alternative?

madmaxxx · 08-15-2006, 10:58 AM

You should install some security add ons and mods to php. I did it and it works really good!

sfera · 08-15-2006, 11:00 AM

try vbulletin or invisionpb looks nice

ScannerX · 08-15-2006, 11:02 AM

email me i can help
[email protected]

Amnesic · 08-15-2006, 11:02 AM

ok thanks I'll look into that, if anyone got more alternative please share

Amnesic · 08-15-2006, 11:04 AM

Quote:

Originally Posted by ScannerX

email me i can help
[email protected]

email sent

u-Bob · 08-15-2006, 11:08 AM

phpbb = bad idea.

stickyfingerz · 08-15-2006, 11:08 AM

Ive been running phpbb for at least 4 years now. Never had an install hacked that I couldnt easily fix. Phpbb is secure.

madawgz · 08-15-2006, 11:09 AM

switch over to vBulliten!

CodeMonkey1385 · 08-15-2006, 11:21 AM

i recommend vanilla as a forum:
getvanilla.com

FleshJoe2005 · 08-15-2006, 11:23 AM

I looked and there's some security alerts about phpbb from Dec 2005 and from Sep 2004, nothing since then. So either you're running a super-ancient phpbb or this is a new exploit.

Amnesic · 08-15-2006, 11:47 AM

must be new I got latest release ... hum

jayeff · 08-15-2006, 11:51 AM

Quote:

Originally Posted by Amnesic

must be new I got latest release ... hum

And if you really believe you were hacked via an exploit in phpBB, have you reported to them what happened, to maybe save someone else the same problem?

bknoob · 08-15-2006, 11:57 AM

if you'd like to switch to a free forum, I suggest SMF. phpBB is just a security hole

Amnesic · 08-15-2006, 12:09 PM

I wanted to create an account on their forum but to put my birthday so now I have to fax them my parents signature.. I am to lazy to signup with another email.

maxidrom11 · 08-15-2006, 12:16 PM

I had nice MusicMatch forum but it was fucked -- i donno what to do either

it is at http://www.audio-video-affair.com/forum/

Dagwolf · 08-15-2006, 12:28 PM

I hope you were backed up.

JD · 08-15-2006, 12:29 PM

get smf. secure as a nuns snatch

dodger21 · 08-15-2006, 12:29 PM

Quote:

Originally Posted by stickyfingerzdotnet

Ive been running phpbb for at least 4 years now. Never had an install hacked that I couldnt easily fix. Phpbb is secure.

Just because you've been lucky doesn't mean that it's secure.

maxidrom11 · 08-15-2006, 12:34 PM

Quote:

Originally Posted by Dagwolf

I hope you were backed up.

how do i bring it back in practice???

stickyfingerz · 08-15-2006, 07:32 PM

Quote:

Originally Posted by dodger21

Just because you've been lucky doesn't mean that it's secure.

Didnt say I hadnt been hacked. Been there done that. Back up your shit on a regular basis. Longest its taken me to fix a hacked forum was 12 minutes.

Hotrocket · 08-15-2006, 07:43 PM

Quote:

Originally Posted by Amnesic

I wanted to create an account on their forum but to put my birthday so now I have to fax them my parents signature.. I am to lazy to signup with another email.

ummmm how old are you?

TheJimmy · 08-15-2006, 07:50 PM

Quote:

Originally Posted by SPeRMiNaToR

get smf. secure as a nuns snatch

been hearing a lot about the strength of the force this one has lately...

must give it a shot, you try it with the seo hack yet?

fris · 08-15-2006, 08:11 PM

vbulletin is all you should be using

scottybuzz · 08-15-2006, 08:36 PM

heres a bump

asdfqwer · 08-17-2006, 03:28 PM

Its hard to answer that question without more info,like what other script were installed on your server,was it hardened etc

DutchTeenCash · 08-17-2006, 03:29 PM

Quote:

Originally Posted by StuartD

phpbb should be renamed "hole in a server"

exactly - everyone who uses it is screwed

08-15-2006, 10:43 AM	#1
Amnesic Confirmed User Join Date: Oct 2004 Location: Qc, Canada Posts: 1,305	phpbb forum got hacked.. crap I had last update.. I don't know what happened.. Any idea?

08-15-2006, 10:47 AM	#2
sundown Registered User Join Date: Sep 2003 Location: Arizona, USA Posts: 10	Was there anything else on the server? Are you sure it was phpbb? Not saying phpbb is super-secure, just wondering. What are you going to replace it with? __________________ Bill - Sex Stuff Sells!

08-15-2006, 10:50 AM	#4
free4porn Confirmed User Join Date: Jun 2005 Posts: 4,654	strange, hope you find the cause __________________ Switch To Fling Now! I'm on 1:201 paid signups sending little traffic! Make $$$ Free Porn

08-15-2006, 11:09 AM	#14
madawgz 8.8.8.8 Industry Role: Join Date: Mar 2006 Location: Noordermarkt Posts: 30,509	switch over to vBulliten! __________________ TAEMDLRMSKRJIXMRLSMRJ.

08-15-2006, 11:23 AM	#16
FleshJoe2005 Confirmed User Join Date: Jan 2005 Posts: 287	I looked and there's some security alerts about phpbb from Dec 2005 and from Sep 2004, nothing since then. So either you're running a super-ancient phpbb or this is a new exploit. __________________ I convert male sextoy traffic at ~1:30!!! Send me your traffic and we'll split 50-50. ICQ: 325-310-821

08-15-2006, 10:48 AM	#3
Amnesic Confirmed User Join Date: Oct 2004 Location: Qc, Canada Posts: 1,305	yeah it was phpbb.. and there was no other script on the virtual account. The server is runing phpsuexec too..

08-15-2006, 10:51 AM	#5
StuartD Sofa King Band Join Date: Jul 2002 Location: Outside the box Posts: 29,903	phpbb should be renamed "hole in a server"

08-15-2006, 10:53 AM	#6
Amnesic Confirmed User Join Date: Oct 2004 Location: Qc, Canada Posts: 1,305	what a crappy application.. any alternative?

08-15-2006, 10:58 AM	#7
madmaxxx Registered User Join Date: Aug 2006 Posts: 25	You should install some security add ons and mods to php. I did it and it works really good!

08-15-2006, 11:00 AM	#8
sfera Confirmed User Join Date: Aug 2005 Location: ICQ: 248877409 Posts: 8,597	try vbulletin or invisionpb looks nice

08-15-2006, 11:02 AM	#9
ScannerX Registered User Join Date: Feb 2006 Posts: 73	email me i can help [email protected]

08-15-2006, 11:08 AM	#12
u-Bob there's no $$$ in porn Industry Role: Join Date: Jul 2005 Location: icq: 195./568.-230 (btw: not getting offline msgs) Posts: 33,063	phpbb = bad idea.

08-15-2006, 11:08 AM	#13
stickyfingerz Doin fine Industry Role: Join Date: Oct 2005 Posts: 24,983	Ive been running phpbb for at least 4 years now. Never had an install hacked that I couldnt easily fix. Phpbb is secure.

08-15-2006, 11:21 AM	#15
CodeMonkey1385 Registered User Join Date: Aug 2006 Posts: 19	i recommend vanilla as a forum: getvanilla.com

08-15-2006, 11:47 AM	#17
Amnesic Confirmed User Join Date: Oct 2004 Location: Qc, Canada Posts: 1,305	must be new I got latest release ... hum

08-15-2006, 11:57 AM	#19
bknoob Confirmed User Join Date: Apr 2006 Posts: 1,610	if you'd like to switch to a free forum, I suggest SMF. phpBB is just a security hole

08-15-2006, 12:09 PM	#20
Amnesic Confirmed User Join Date: Oct 2004 Location: Qc, Canada Posts: 1,305	I wanted to create an account on their forum but to put my birthday so now I have to fax them my parents signature.. I am to lazy to signup with another email.

08-15-2006, 12:16 PM	#21
maxidrom11 Confirmed User Join Date: Oct 2005 Posts: 602	I had nice MusicMatch forum but it was fucked -- i donno what to do either it is at http://www.audio-video-affair.com/forum/ __________________ Cheap Cigarettes ++ Cash Burners Review

08-15-2006, 12:28 PM	#22
Dagwolf President of Canada Join Date: Sep 2003 Location: Leaving Hell, Entering Limbo Posts: 23,141	I hope you were backed up. __________________ Sleep well, and dream of large women.

08-15-2006, 12:29 PM	#23
JD Too lazy to set a custom title Industry Role: Join Date: Sep 2003 Posts: 22,651	get smf. secure as a nuns snatch

08-15-2006, 08:11 PM	#29
fris Too lazy to set a custom title Industry Role: Join Date: Aug 2002 Posts: 55,372	vbulletin is all you should be using __________________ Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence. WP Stuff

08-15-2006, 08:36 PM	#30
scottybuzz Too lazy to set a custom title Industry Role: Join Date: May 2006 Location: NY Posts: 14,800	heres a bump __________________ $$$$$ MAKE HUGE MONEY IN CAMS - CLICK HERE $$$$$

08-17-2006, 03:28 PM	#31
asdfqwer Confirmed User Join Date: Jul 2003 Posts: 431	Its hard to answer that question without more info,like what other script were installed on your server,was it hardened etc