Site Hacked !?

Site Stuff.

Site Hacked !?

Postby TonyB » Thu Dec 23, 2010 4:34 pm

Greetings,

Some of you may have noticed the site was down over the past couple of days due to a hack attempt. Although the hack attempt may of seemed bad, it was really just a trivial attempt by a wannabe hacker. The person injected a prewritten script file which allows them to modify the contents of the index.php page. This was a known security flaw in the phpBB forum V3.0.5. PhpBB V3.0.7 fixes this flaw. I had first thought someone logged my password via a keystroke logger whilst i was overseas, but this was not the case.

I have yet to update to the latest version of phpBB but will do so soon.

Anyways, you can rest assured that all the private contents, including your passwords are safe as the database was not accessed. Passwords are stored as un-reconstructable md5 hashes in the sql database which the hacker doesnt have access to. If they are somehow accessed, there is no way to recover an MD5 hash into ascii.

Cheers
-TonyB
User avatar
TonyB
 
Posts: 672
Joined: Sun Dec 02, 2007 3:45 am
Location: Australia

Re: Site Hacked !?

Postby TonyB » Sat Jan 15, 2011 12:54 am

The site has been updated to the latest version of phpbb.
Current version: 3.0.8seo

Please let me know if you find any bugs, or have any suggestions.
-TonyB
User avatar
TonyB
 
Posts: 672
Joined: Sun Dec 02, 2007 3:45 am
Location: Australia


Return to The Site itself.

Who is online

Users browsing this forum: No registered users and 0 guests