I've had hacker problems in the past... user accounts got hijacked where publicly displayed name wasnt used to hide login name and then the password was cracked by brute force. During that time, there was one day when an administrator account got hijacked and the hacker played around in my control panel.
Since then I've uploaded the vars_lock file like described in Administrators guide, I've deleted the compromised accounts when possible, started changing password on the member #1 account every day, and even hacked in the standard floodcheck on login to slow down the hackers.
but now I got a brand new administrator account that was compromised and somebody got into my control panel again and deleted other administrator accounts <img src="https://www.ubbcentral.com/boards/images/graemlins/frown.gif" alt="" />
So two questions -
1. Is it possible that the first time they hacked into my control panel they might of made note of the "Members directory" location and their now able to get ahold of login names that way?
2. If the answer to #1 is yes... Can I safely close the board, rename members directory on disk, and then update that config setting in CP without hurting anything?
I'm on ubb.classic 6.7
TIA!
