Hacked

by alicia on November 14th 2009, 6:30 am

I have been informed by one of my moderators that we have been hacked into by the troublemakers I ousted from my forum. Here is James's post. I have tried it and it does work.

How can I close down my forum and reinvent it to stop this. Do I have to delete my forum and start again from scratch or would changing the domain name stop this? If I change domain name does original address still stand? Would it be better to start from scratch and rebuild my forum?

Here is James's post

I've just tried something and it is very worrying and i would say if posible to change the domain name ASAP.

If you log in and look at the address, it will have the main address and loads of numbers and letters after it, this is the worrying part.
(It doesn't always come up like)

I logged in, copied that address then closed the browser, cleared the history (all of it) and opened up the browser again.
Pasted the addres i copied before and it logged me in WITHOUT entering a username and password.

Upon doing this several times and different browsers, i would say it IS possible to browse the forum as a guest (guest being a deleted member).

I think that would be a cause for concern

by musket on November 14th 2009, 6:48 am

I logged in, copied that address then closed the browser, cleared the history (all of it) and opened up the browser again.
Pasted the addres i copied before and it logged me in WITHOUT entering a username and password.

logout first and try it again.

If you're logged in and exit the forum by closing the browser you usually can get in again without having to log in by using a saved shortcut that was made when you where logged in. but if you log out before closing the browser then the shortcut that you made will only open up the forum login page. Smile

If you open the Admin panel>>home ...at the bottom of the page you will be able to read all guests and members IP numbers and what they are looking at in the forum Smile