Site Links
Home
Features
Documentation
Pricing & Order
Members Area
Support Options
UBBDev.com
UBBWiki.com
Who's Online Now
2 registered members (GliderCENTRAL, Morgan), 72 guests, and 261 spiders.
Key: Admin, Global Mod, Mod
Member Spotlight
isaac
isaac
California
Posts: 1,229
Joined: April 2004
Show All Member Profiles 
Top Posters(30 Days)
Gizmo 25
Ruben 14
Morgan 12
isaac 9
Alento 3
SteveS 3
JAISP 2
Latest Photos
Test
Testing to drag photos
Comfortable Cats
Test
BSA photos
Previous Thread
Next Thread
Print Thread
Classic board hacked? #217769
10/10/08 02:27 PM
10/10/08 02:27 PM
Z
zoomeister  Offline OP
stranger
Joined: Oct 2008
Posts: 7
I now have set up a UBB.Threads board 7.3.1 and imported my UBB.Classics threads/posts/members to it and the Threads board is running smoothly. However, the Classic board (6.7.1), that I will be turning into an archive board shortly, has been hacked by one or two people as soon as I shut down registrations. I have the Classic board set so that only registered users can post, but this person, or persons is not only able to post, he/she can start a new topic. It has happened in two different forums so far.

So I have a question. Will this person(s) be able to do the same thing to my new Threads board? I know the PHP format is vastly different from the old perl scripts, but I'm not sure what this person is exploiting to get in. I'm not worried about the old board because when I archive it I'll just change the file permissions so that nothing will be writable anymore when I archive it, but what about my new Threads board? Will they be able to do the same thing there?

Express Hosting
Express Hosting "We are the official hosting company of UBB.threads. Ask us about our free migration services to migrate your UBB.threads installation."
Re: Classic board hacked? [Re: zoomeister] #217782
10/10/08 04:59 PM
10/10/08 04:59 PM
Gizmo  Offline
UBB.threads Developer
Joined: Jun 2006
Posts: 16,999
Portland, OR; USA
Well, the two products are completely different; so whatever they're using to post won't be there...

Just make sure after you move that the user isn't an admin and you should be good to go...


I am a Web Development Contractor, I do not work for UBBCentral. I have provided free User to User Support since the beginning of these support forums.
Need to Upgrade?
Forums: A Gardeners Forum Scouters World
UBB.threads: UBBWiki, UBB Styles, UBB.Sitemaps
Longtime Supporter & Resident Post-A-Holic
VNC Web Services: Code Modifications, Upgrades, Styling, Coding Services, Disaster Recovery, and more!
Re: Classic board hacked? [Re: Gizmo] #217786
10/10/08 06:30 PM
10/10/08 06:30 PM
Z
zoomeister  Offline OP
stranger
Joined: Oct 2008
Posts: 7
Thanks, Gizmo. No, it's not an admin, it's not even a user, at least according to the IP numbers. I tried to run a DNS on them, but they wouldn't resolve. I put them in a browser and it led to a Chinese site. A lot of the spam-bot registrations that plague the Classic board are from a .cn site, so no surprise, I guess. I'd just like to know how they can post on a board that is set to users only.

Re: Classic board hacked? [Re: zoomeister] #217798
10/10/08 09:14 PM
10/10/08 09:14 PM
JAISP  Offline
Veteran
Joined: Feb 2007
Posts: 1,335
Pennsylvania
Go to www.arin.net to check the IP address. If it is over sea's it will tell you where to go to find out where they are.

Re: Classic board hacked? [Re: JAISP] #218928
11/08/08 12:44 AM
11/08/08 12:44 AM
Z
zoomeister  Offline OP
stranger
Joined: Oct 2008
Posts: 7
Here's kind of an update. Ever since I shut down registration on the old board, someone hacks in about twice a week and it's like they do it just to prove they can. I was actually in the midst of turning the forums one by one into archive-read only forums and the creep struck again.

What I've discovered is it seems the person or persons hacking and spamming the board have to use "<>" to bracket the name they choose to post with. Like say "<hacker guy>" and they get in. I don't have a clue how they're doing it, but I thought I'd let you know.

Re: Classic board hacked? [Re: zoomeister] #220155
12/11/08 12:57 PM
12/11/08 12:57 PM
David Dreezer  Offline

Pooh-Bah
Joined: Jul 2006
Posts: 2,199
<> around a name is automatically added by the UBB and indicates the person is not registered and is posting as a guest. Do you have guest posting enabled?


This thread for sale. Click here! [Linked Image]

Shout Box
Today's Birthdays
No Birthdays
Recent Topics
testar
by Morgan. 11/18/18 02:33 PM
Phishing SCAM emails
by Morgan. 11/16/18 01:28 PM
Repliers can change thread title
by Baldeagle. 11/12/18 08:49 PM
Tabs In Header
by AstroCat. 11/11/18 08:33 AM
Mindraven
by SteveS. 11/09/18 07:12 PM
Forum Statistics
Forums36
Topics35,167
Posts191,606
Members12,113
Most Online978
Jun 24th, 2007
Random Image
Powered by UBB.threads™ PHP Forum Software 7.6.2