DWF-Forums hacked

[-=)DWF(=-DreamScreamer]

DWF recieved a special x-mas present. Our forums were hacked. The index.php was deleted/replaced and linked to another site in a language I didn´t know but seem russian or that kinda. The main database doesnt´t look to be affected. Does anyone of you know how to protect sites against hackers effectively?

[SALvation]

You should delete any config and setup files that you upload when first setting up your board. Also make sure you use a secure host and keep your password hard to guess.

[-=)DWF(=-DreamScreamer]

Thanks SAL.

[Twin])I2agon]

Oh , never knew he posted that here.
By now we know it wasnt against us , they somehow got acces to the entire server ... so it was nothing we could have prevented but the hosting company could have. :down:

[<<Hybrid>>]

lol every child who installed forum boards know where to find config file and password in it

[Twin])I2agon]

Originally posted by <<Hybrid>>@Jan 22 2004, 04:52 PM
lol every child who installed forum boards know where to find config file and password in it

The ftp password isnt stored in a config file. Neither is any of our passwords except the mysql p/w but i dont think u would be able to get access to this file. I think u dont know what ur talking about dude.

[SALvation]

Originally posted by Twin])I2agon@Jan 22 2004, 10:50 AM
Oh , never knew he posted that here.
By now we know it wasnt against us , they somehow got acces to the entire server ... so it was nothing we could have prevented but the hosting company could have. :down:
Sounds like you guys picked the wrong hosting company. ;)

[<<Hybrid>>]

Originally posted by Twin])I2agon+Jan 22 2004, 06:57 PM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (Twin])I2agon @ Jan 22 2004, 06:57 PM)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin-<<Hybrid>>@Jan 22 2004, 04:52 PM
lol every child who installed forum boards know where to find config file and password in it

The ftp password isnt stored in a config file. Neither is any of our passwords except the mysql p/w but i dont think u would be able to get access to this file. I think u dont know what ur talking about dude. [/b][/quote]
yeah u r right, totaly forgot about password

if so, then search whos guilty at DWF, or that just was mistake/fault at hosting.

[Twin])I2agon]

:unsure:

[JIMINATOR]

:rofl: good one&#33;

[EXEcution]

NEATO&#33;

[NoS]

very cool