Not long ago I was hacked in my forum and then they hit one of my sites and in trying to figure out why I was hit like that and not only had it happend once it happend again, and I just could not figure out why they were attacking my site, after talking to some people I had found that it was possible that they were getting in via the shout box, but then I did some research ON MY OWN and found that my host was being attacked due to lack of security, which made me take on a new look at my sites and what I should do.
I contacted my host and told them that the problem was in their security, and they went nuts on me saying that it was impossible that they know it was SMF/TP which was the cause because I am the only one that has these types of forums, I then attempted to tell them that it was only one of my sites in which SMF was operating on, and that my other sites were not affected, which made me stop and think for a few seconds more, well there might be something here to all this, if they were hacked, then why was my others sites untouched? What was the cause and how were they able to do their business in just on site of my own and get in and attack all the others like that? I spent a better part of a day talking to a few friends, and we come up with a solution to the problem, remove the shout box for a while, and see if they can hack into the site after it is gone, and if they hack the site again, then it might be best to fully change my hosting companies, which is alreay in progress as I speak.
I would just like to find out some how, the problem in the program is any, and have some one tell me the facts instead of having to deal with idoits all the time. It wasn't us, It wasn't us, back and forth and with not one person with a solution to the problem.
rw
Some hosts are quick to blame. Have you asked them for proof? If they "know" it was SMF/TP, then they should be able to SHOW you how it happened. If there was an exploit that big I'm pretty sure more than just your site would have been hacked around here.
Do you allow guests to use the Shoutbox?
Quote from: Zetan on July 08, 2007, 08:02:00 AM
Do you allow guests to use the Shoutbox?
No not at all, however this does not stop a person from joining the site, I am not at all sure what to do at this point, but removing the shout box is a starter, even if there is nothing wrong.
Quote from: IchBinâ„¢ on July 08, 2007, 05:38:14 AM
Some hosts are quick to blame. Have you asked them for proof? If they "know" it was SMF/TP, then they should be able to SHOW you how it happened. If there was an exploit that big I'm pretty sure more than just your site would have been hacked around here.
Now is a good reason to just lease your own server, not to say it wouldn't happen to me, but at least I can take blame for my own mistakes.
I recently removed the shoutbox.. for no other reason than it wasn't being used and we have a chatroom.