Security on the forums?

[michael.h.o]

My issue is simpel. I have a forum (http://kingsalliance.danskforum.net/) where some one apparently have access to my restrictet subforums. Even the onces that are admin only access the persons can get into (i have cheked it serval times to be sure that they should not be able to get in).

Therefore, i will ask you. 1 Is it posible to stop the person that can get in and 2 how to catch him it the act?

[bernardus]

Apparently? What do you mean by that?
I know for sure that someone took screenshots of my MODBOX and then posted them on the net bragging about how good a hacker s/he was.
I've used a trick and spotted proxys inside the modbox but unfortunately you can only match an IP to a username if they post or if you stay 24/7 looking at the IPs/username of 'who is online'.

[michael.h.o]

Your MODBOX? What is that?

Well that sentens made sence in danish, so i just translatede it into english, but somtimes misunderstandings come out of that

I have seen some screenshots from the restricted parts of my forum, that he have made. But since i'm no computer expert i have no idea how to spot the way he get inside the forum

[Darren1]

Hello,

does the user have sufficient permission to view the room/s?
Admin panel >> Users & Groups ( Tab ) >> Search for the known user > and check if they have permission to view the room/s

[bernardus]

Your MODBOX? What is that?

Well that sentens made sence in danish, so i just translatede it into english, but somtimes misunderstandings come out of that

I have seen some screenshots from the restricted parts of my forum, that he have made. But since i'm no computer expert i have no idea how to spot the way he get inside the forum

Sorry, I meant a private forum restricted only to moderators. In my case I suspect It could be one of the moderators, or someone using a moderator password (hacked or not).
Proxys are used to access that area.
As you probably know several users can login simultaneously using the same username/password but with different IPs, so unless you keep an watchful eye on the users on line it's nearly impossible to know if the same user is logged simultaneously from two or more IPs.
Too bad FORUMOTION can't be bothered to implement this security feature in their forums.

http://www.phpbb.com/customise/db/mod/user_ip_logs

It would solve me a lot of problems related to hacked accounts and illegal accesses.

[Darren1]

Bernardus,

Forumotion can't impliment just any PHPBB, IPB or PunBB features; they MUST be specifically coded, as forumotion doesn't use use php.
The techs must specifically code and design everything from scratch.

[bernardus]

Bernardus,

Forumotion can't impliment just any PHPBB, IPB or PunBB features; they MUST be specifically coded, as forumotion doesn't use use php.
The techs must specifically code and design everything from scratch.

Fair enough.
It's just that I feel helpless when I see screen shots of the moderator's area on other websites.
I placed links on the moderators area pointing to non existant JPG files in one of my websites.
This generates a 404 error in my website error logs.
It logs the date/time, the IP (always proxys) and the referrer.
So, I know the IP, the date and the location in the forum. I just can't put a username on that IP.
So near, yet so far.

[michael.h.o]

The person who have gotten access have been banned on name and IP and the forum he gets information from have all rights removed, so that only admins can read it!

So the trouble is how is he getting into the forum and even more important, how he is getting into forums that no one but the admins can read (Mods can't see it either)

I just wish there where a way to make the forum secure again

[SLGray]

Do you have more than one administrator? It could be an administrator's account has been hacked.