UBB.threads PHP Forum Software Community Forums UBB.classic UBB.classic 6 Support What to do if hacked?

In my website stats, I noticed an abnormal number of hits to my control panel recently. I don't remember it being me. I could be wrong, but it made me think...

Once someone gets into your control panel are you basically done?

Other than periodically changing your control panel password, what can you do to prevent your control panel from being hacked?

Has anyone had their control panel hacked? What did you do after you found out?

well if your using a custom counter that you put yourself then maybe, but if you are looking at the counter from the control panel on the first page you have to remember that, thats page views and not hits, i would like it to be hits, but everytime you open a new page inside or out of the cp one is added to that number.

If you would like to make your ubb a lil more secure..

Click Here

A while ago someone changed several words in our UBB code letting us know how clever he/she was. Perhaps to let us know that we had a hack hole open. One thing I found out was that I had not deleted, as instructed, the UBB6_test.cgi file from our server. Apparently this is an entry that harvesters look for.

Kerry

The first things to do, ALWAYS:
1) Ensure your Members directory is suitably protected (by server access controls).
2) Ensure your UltBB.setup (UBB5) / vars_config.cgi (UBB6) file is suitably protected (HTTP server should try to execute it when called, or deny access completely)
3) Make sure your username (UBB6) and password (both) are suitably difficult to guess. ESPECIALLY YOUR PASSWORD! That includes access to your email account.
4) Protect your FTP access codes (username/pw/hostname) at all costs. With FTP access, the rest falls apart.
5) Ensure all UBB diagnostic tools / installation files are deleted, protected or disabled (at the server level). i.e. ubb_test.cgi, Admin5.cgi (UBB5), ubb6_test.cgi, ubb_upgrade.cgi, ubb_setup.cgi (UBB6)

NOTE: ubb_setup.cgi is a module used in cp.cgi therefore not as critical. <img src="https://www.ubbcentral.com/boards/images/graemlins/smile.gif" alt="" />

At which point you can start worrying about other things such as your moderators, protecting the cp.cgi, etc.. <img src="https://www.ubbcentral.com/boards/images/graemlins/smile.gif" alt="" />

Graeme