The forum of the forums
Welcome to the Official Support Forum of Forumotion!

To take full advantage of everything offered by our forum, please log in if you are already a member, or join our community if you've not yet.



Create a free forum like this one.

"Guest" hacked into forum

View previous topic View next topic Go down

In progress "Guest" hacked into forum

Post by colograndma on November 20th 2013, 3:23 am

What can i do about someone who has hacked into my forum? I have a print screen showing an "Opened" group with 1 member - i didn't set it up - and i have their IP address. They are in the UK. I am worried about someone compromising our members' personal information.

I believe they gained access through a widget. The rights screen now includes "Guests" and when i try to uncheck it, the check mark just reappears. Help???


Last edited by colograndma on November 20th 2013, 3:39 am; edited 1 time in total (Reason for editing : Additional info)

colograndma
New Member

Posts : 13
Reputation : 1
Language : English

Back to top Go down

In progress Re: "Guest" hacked into forum

Post by Ange Tuteur on November 20th 2013, 5:53 am

Hello colograndma,

I'm having trouble understanding your issue. What exactly did this guest do? Please elaborate.

When you manage certain permissions be sure to your changes, otherwise they will not apply.

Ange Tuteur
Forumaster

Male Posts : 13028
Reputation : 2704
Language : EN10, FR5
Location : Pennsylvania

http://fmdesign.forumotion.com

Back to top Go down

In progress Re: "Guest" hacked into forum

Post by SLGray on November 20th 2013, 8:01 am

Guests should not be able to create and join a group. Is this one member listed in the memberlist? Could another administrator have created this group? Does this group appear in the legend?


When your topic has been solved, ensure you mark the topic solved.
Never post your email in public.


SLGray
Administrator
Administrator

Male Posts : 36673
Reputation : 2445
Language : English
Location : United States

http://ztwds.forumotion.com/

Back to top Go down

In progress Re: "Guest" hacked into forum

Post by colograndma on November 20th 2013, 9:48 pm

Seth - sorry I didn't make myself clear. The hacker apparently did something to the coding on the Forum Widget Management page - the "Addition of Existing Widgets" and "Addition/Deletion of personal widgets" boxes, where you check the rights. I did not have "Guest" checked, but it IS checked now, and when I uncheck it and save it, it just comes back checked again. I will try to attach a screen print.

Also, the hacker seems to have opened a group - it DOES NOT show up on the Group Administration page. But when you click on the "Who's Online" link, it shows up as "Opened Group" with no other wording of any kind. I will also try to attach a screen print of that.

SLGray - to answer your questions: I know a guest shouldn't be able to create and join a group. This is NOT a member - it was someone in the UK, and we don't have any UK members. I am the only administrator. The group does not appear in the legend, but it appears when you click on "Who's Online".


colograndma
New Member

Posts : 13
Reputation : 1
Language : English

Back to top Go down

In progress Re: "Guest" hacked into forum

Post by Ange Tuteur on November 20th 2013, 9:58 pm

That's the preset permissions for when you add the widgets. They're always set to that, so that is nothing to worry about.

To manage an individual widgets permissions do the following.

1. ) Shows the permissions of who can currently view the widget
2. ) Clicking the Perms button will allow you to manage a widget



Once you click the permissions button you should see this screen:


This will allow you to manage who sees the widget, when you've set what you want simply save.

As for the invisible group I am not sure of.

Ange Tuteur
Forumaster

Male Posts : 13028
Reputation : 2704
Language : EN10, FR5
Location : Pennsylvania

http://fmdesign.forumotion.com

Back to top Go down

In progress Re: "Guest" hacked into forum

Post by SLGray on November 21st 2013, 3:33 am

Have you tried to delete the invisible group? It really looks like a glitch.


When your topic has been solved, ensure you mark the topic solved.
Never post your email in public.


SLGray
Administrator
Administrator

Male Posts : 36673
Reputation : 2445
Language : English
Location : United States

http://ztwds.forumotion.com/

Back to top Go down

In progress Re: "Guest" hacked into forum

Post by colograndma on November 21st 2013, 4:34 am

Seth - ok, thanks for the explanation - my mistake

SLGray - there isn't any way to delete the group because it doesn't show up on the Groups management page. And there is no group name link that would allow me to access the properties and delete it. If you think it is a glitch, i will take your word for it and just waych it for now. Thanks for the assistance. You can mark Resolved.

colograndma
New Member

Posts : 13
Reputation : 1
Language : English

Back to top Go down

In progress Re: "Guest" hacked into forum

Post by SLGray on November 21st 2013, 4:36 am

I will report this to our Pro Admin (Buttercup). Please post your forum's link.


When your topic has been solved, ensure you mark the topic solved.
Never post your email in public.


SLGray
Administrator
Administrator

Male Posts : 36673
Reputation : 2445
Language : English
Location : United States

http://ztwds.forumotion.com/

Back to top Go down

In progress Re: "Guest" hacked into forum

Post by Leviosa on December 2nd 2013, 10:39 am

@colograndma wrote:What can i do about someone who has hacked into my forum? I have a print screen showing an "Opened" group with 1 member - i didn't set it up - and i have their IP address. They are in the UK. I am worried about someone compromising our members' personal information.

I believe they gained access through a widget. The rights screen now includes "Guests" and when i try to uncheck it, the check mark just reappears. Help???
Hello,

You can delete the group in the section
Admin Panel> User & group> group> delete the group

I advise you to change your password and make your foundation email different from the email of the forum (Tutorial here: http://help.forumotion.com/t127212-foundation-email)

Let me know, if you still have problem.
regards

Buttercup

Leviosa
Administrator
Administrator

Female Posts : 15587
Reputation : 1589
Language : French, English

http://help.forumotion.com

Back to top Go down

View previous topic View next topic Back to top


 
Permissions in this forum:
You cannot reply to topics in this forum