Just got Hacked

[bloc]

As mentioned elsewhere I will send out another update for the 0.8.6 version today. The prior patch works for the redirect hack..but its still possible - via another procedure - to change usernames on the fly.

It should not do any harm other than spamming though.

[BobbyKashyap]

Bloc... no worries.. take your time. we can disable shoutbox for now.

[basis]

basis, the message for security update describes where to FTP them 

Attached are 2 updated files that will prevent this from happening. They will also restore a TP site that is currently being redirected because of the exploit.

opps my bad. sorry for being a pain. thanks again for the help agridoc. Using your tip, I managed to get the site back, removed the post and disabled shoutbox for now.

i really do not understand what these folks have to prove by defacing the sites of others.

[basis]

just an aside. from what i saw of the defacement. the people signed up in the forums, but did not have to be logged in to post the shout.

[agridoc]

hi agridoc.. yep that patch u mentioned is there from quite some... but still they were able to hack in!

BobbyKashyap people reading your message may get confused.

There are sites that were really hacked (redirected) and the patch is necessary and effective for recovering the forum and protection, as basis and others confirm.

You have the patch applied and you had what I call a "hacking attempt" resulting in an ennoying mesage in the shoutbox. This is known from the very first days these hacks appeared http://www.tinyportal.net/smf/index.php?topic=4440.msg37021#msg37021

Bloc is going to have a new patch to fix this too. Ã, 

But please report as hack only if there was a redirection or other major problem. Otherwise it' s just a hacking attempt.  :coolsmiley:

[BobbyKashyap]

oopz... sorry for the confusion caused. thx agridoc for correcting me.

[iwyen]

85.108.255.110

Does IP help? Broadband users share IPs right? Anyway, I'm an impatient webmaster, so that's all the info left after I deleted the account.

[agridoc]

Nevermind BobbyKashyap, just trying to avoid a panic  :laugh:

iwyen, have a look at http://www.tinyportal.net/smf/index.php?topic=4440.msg43438#msg43438 and the following messages, read Bloc's opinion, you will find also mine.

[gerrymo]

That IP resolves to TurkTelekom in Ankara, Turkey.

[iwyen]

iwyen, have a look at http://www.tinyportal.net/smf/index.php?topic=4440.msg43438#msg43438 and the following messages, read Bloc's opinion, you will find also mine.

Yep thanks Just to reassure my understanding There was one site I knew that probably banned one of my ISP customer and all other customers get blocked. I sure felt unwelcomed at that time..

Hope everyone's doing fine. It's quite late for me so I'll let the hackers play for a while first..