The forum of the forums
Would you like to react to this message? Create an account in a few clicks or log in to continue.

"Guest" hacked into forum

4 posters

Go down

In progress "Guest" hacked into forum

Post by colograndma November 20th 2013, 3:23 am

What can i do about someone who has hacked into my forum?  I have a print screen showing an "Opened" group with 1 member - i didn't set it up - and i have their IP address.  They are in the UK.  I am worried about someone compromising our members' personal information.

I believe they gained access through a widget.  The rights screen now includes "Guests" and when i try to uncheck it, the check mark just reappears.  Help???


Last edited by colograndma on November 20th 2013, 3:39 am; edited 1 time in total (Reason for editing : Additional info)
avatar
colograndma
New Member

Posts : 13
Reputation : 1
Language : English

Back to top Go down

In progress Re: "Guest" hacked into forum

Post by Ange Tuteur November 20th 2013, 5:53 am

Hello colograndma,

I'm having trouble understanding your issue. What exactly did this guest do? Please elaborate.

When you manage certain permissions be sure to "Guest" hacked into forum Captu130your changes, otherwise they will not apply.
Ange Tuteur
Ange Tuteur
Forumaster

Male Posts : 13246
Reputation : 3000
Language : English & 日本語
Location : Pennsylvania

https://fmdesign.forumotion.com

Back to top Go down

In progress Re: "Guest" hacked into forum

Post by SLGray November 20th 2013, 8:01 am

Guests should not be able to create and join a group. Is this one member listed in the memberlist?  Could another administrator have created this group? Does this group appear in the legend?


"Guest" hacked into forum Slgray10

When your topic has been solved, ensure you mark the topic solved.
Never post your email in public.
SLGray
SLGray
Administrator
Administrator

Male Posts : 51463
Reputation : 3519
Language : English
Location : United States

https://forumsclub.com/gc/128-link-directory/

Back to top Go down

In progress Re: "Guest" hacked into forum

Post by colograndma November 20th 2013, 9:48 pm

Seth - sorry I didn't make myself clear.  The hacker apparently did something to the coding on the Forum Widget Management page - the "Addition of Existing Widgets" and "Addition/Deletion of personal widgets" boxes, where you check the rights.  I did not have "Guest" checked, but it IS checked now, and when I uncheck it and save it, it just comes back checked again.  I will try to attach a screen print.

Also, the hacker seems to have opened a group - it DOES NOT show up on the Group Administration page.  But when you click on the "Who's Online" link, it shows up as "Opened Group" with no other wording of any kind.  I will also try to attach a screen print of that.

SLGray - to answer your questions:  I know a guest shouldn't be able to create and join a group.  This is NOT a member - it was someone in the UK, and we don't have any UK members.  I am the only administrator.  The group does not appear in the legend, but it appears when you click on "Who's Online". 

"Guest" hacked into forum Forum_10"Guest" hacked into forum Groups10
avatar
colograndma
New Member

Posts : 13
Reputation : 1
Language : English

Back to top Go down

In progress Re: "Guest" hacked into forum

Post by Ange Tuteur November 20th 2013, 9:58 pm

That's the preset permissions for when you add the widgets. They're always set to that, so that is nothing to worry about.

To manage an individual widgets permissions do the following.

1. ) Shows the permissions of who can currently view the widget
2. ) Clicking the Perms button will allow you to manage a widget

"Guest" hacked into forum Captu131

Once you click the permissions button you should see this screen:
"Guest" hacked into forum Captu132

This will allow you to manage who sees the widget, when you've set what you want simply save.

As for the invisible group I am not sure of.
Ange Tuteur
Ange Tuteur
Forumaster

Male Posts : 13246
Reputation : 3000
Language : English & 日本語
Location : Pennsylvania

https://fmdesign.forumotion.com

Back to top Go down

In progress Re: "Guest" hacked into forum

Post by SLGray November 21st 2013, 3:33 am

Have you tried to delete the invisible group? It really looks like a glitch.


"Guest" hacked into forum Slgray10

When your topic has been solved, ensure you mark the topic solved.
Never post your email in public.
SLGray
SLGray
Administrator
Administrator

Male Posts : 51463
Reputation : 3519
Language : English
Location : United States

https://forumsclub.com/gc/128-link-directory/

Back to top Go down

In progress Re: "Guest" hacked into forum

Post by colograndma November 21st 2013, 4:34 am

Seth - ok, thanks for the explanation - my mistake

SLGray - there isn't any way to delete the group because it doesn't show up on the Groups management page.  And there is no group name link that would allow me to access the properties and delete it.  If you think it is a glitch, i will take your word for it and just waych it for now.  Thanks for the assistance.  You can mark Resolved.
avatar
colograndma
New Member

Posts : 13
Reputation : 1
Language : English

Back to top Go down

In progress Re: "Guest" hacked into forum

Post by SLGray November 21st 2013, 4:36 am

I will report this to our Pro Admin (Buttercup). Please post your forum's link.


"Guest" hacked into forum Slgray10

When your topic has been solved, ensure you mark the topic solved.
Never post your email in public.
SLGray
SLGray
Administrator
Administrator

Male Posts : 51463
Reputation : 3519
Language : English
Location : United States

https://forumsclub.com/gc/128-link-directory/

Back to top Go down

In progress Re: "Guest" hacked into forum

Post by Shadow December 2nd 2013, 10:39 am

colograndma wrote:What can i do about someone who has hacked into my forum?  I have a print screen showing an "Opened" group with 1 member - i didn't set it up - and i have their IP address.  They are in the UK.  I am worried about someone compromising our members' personal information.

I believe they gained access through a widget.  The rights screen now includes "Guests" and when i try to uncheck it, the check mark just reappears.  Help???
Hello,

You can delete the group in the section
Admin Panel> User & group> group> delete the group
"Guest" hacked into forum Delete10
I advise you to change your password and make your foundation email different from the email of the forum (Tutorial here: https://help.forumotion.com/t127212-foundation-email)

Let me know, if you still have problem.
regards

Buttercup
Shadow
Shadow
Manager
Manager

Male Posts : 16217
Reputation : 1831
Language : French, English

Back to top Go down

Back to top


 
Permissions in this forum:
You cannot reply to topics in this forum