Antworten: 18
Seite [1] |
|
![]() Beginner Beiträge: 8 |
# Thema - 03.11.2011 um 21:41 Uhr
I installed the CMS two week ago, in a non primary folder, a testing folder in the second level but today someome hack my index page of CMS. How can I prevent this? They hacked my website more faster than i used the old phphnuke! ![]() PS: the version is 2011.2 Zuletzt editiert von esse999 am 03.11.2011 um 21:41 Uhr (1x Editiert)
|
Inaktiv |
|
![]() ![]() Supporter ![]() Herkunft: Erdeborn bei Lutherstadt Eisleben Beiträge: 3191 |
# Antwort: 1 - 03.11.2011 um 21:52 Uhr
link to this page? logs? more infos? its like: "hey, someone has knocked on my door! Who is it?" please give us more infomations! ------------------ |
Inaktiv |
|
![]() Thread-Ersteller Beginner Beiträge: 8 |
# Antwort: 2 - 03.11.2011 um 22:09 Uhr
The website is www.deltalasertag.it/dlt I did set a more restrictive access for users and guests but nothing. the install files was removed |
Inaktiv |
|
![]() ![]() Supporter ![]() Beiträge: 3073 |
# Antwort: 3 - 03.11.2011 um 22:14 Uhr
㰀䠀䔀䄀䐀 ... Is this the same as phpnuke? ------------------ I like the part where it says 'nyan' ![]() Zuletzt editiert von palle ![]() |
Inaktiv |
|
![]() Thread-Ersteller Beginner Beiträge: 8 |
# Antwort: 4 - 03.11.2011 um 22:23 Uhr
It was an example, phpnuke was an old cms i used years ago with high level of hacking. However i don't understand how they find my website, i uploaded 2 week ago and i never sent links o visibility. |
Inaktiv |
|
![]() ![]() Highlander ![]() Beiträge: 3291 |
# Antwort: 5 - 03.11.2011 um 22:24 Uhr
I don't think that they have hacked your ClanSphere installation. I think they hacked your ftp (trojan....) ![]() btw. reupload index.php, change ftp passwd, check antivir, ect. However i don't understand how they find my website, i uploaded 2 week ago and i never sent links o visibility. ![]() ------------------ Gruß/ Best regards Jam2 Nützliche Forumbeiträge/Codepastes: (Useful comments in our board / codepastes) Template Switch for index.php Board Navlist last posts Edi: könnte man denn auch hier eine erweiterung einfügen?
Jam2: das web ist wie toyota..... ![]() Edi: hö ? Jam2: nichts ist unmöglich! Zuletzt editiert von Jam2 ![]() |
Inaktiv |
|
![]() Thread-Ersteller Beginner Beiträge: 8 |
# Antwort: 6 - 03.11.2011 um 22:25 Uhr
We are using a joomla CMS in parallel and it's not hacked or modified |
Inaktiv |
|
![]() ![]() Highlander ![]() Beiträge: 3291 |
# Antwort: 7 - 03.11.2011 um 22:28 Uhr
So on... We need Server Logs ![]() you should now do -> reupload index.php -> deactivate "explorer"-modul (only with this modul someone can edit datas in clansphere) -> change pws ------------------ Gruß/ Best regards Jam2 Nützliche Forumbeiträge/Codepastes: (Useful comments in our board / codepastes) Template Switch for index.php Board Navlist last posts Edi: könnte man denn auch hier eine erweiterung einfügen?
Jam2: das web ist wie toyota..... ![]() Edi: hö ? Jam2: nichts ist unmöglich! |
Inaktiv |
|
![]() Thread-Ersteller Beginner Beiträge: 8 |
# Antwort: 8 - 03.11.2011 um 22:33 Uhr
03.11.2011 um 22:28 Uhr - Jam2: So on... We need Server Logs ![]() you should now do -> reupload index.php -> deactivate "explorer"-modul (only with this modul someone can edit datas in clansphere) -> change pws Ok, for server log i need to tell to my provider. i think and i hope i was the explorer module exploit. ![]() |
Inaktiv |
|
![]() ![]() Highlander ![]() Beiträge: 3291 |
# Antwort: 9 - 03.11.2011 um 22:35 Uhr
iI don't know any exploit of explorer modul. only if index.php have got something like chmod 777 it is possible to change it with explorer modul ------------------ Gruß/ Best regards Jam2 Nützliche Forumbeiträge/Codepastes: (Useful comments in our board / codepastes) Template Switch for index.php Board Navlist last posts Edi: könnte man denn auch hier eine erweiterung einfügen?
Jam2: das web ist wie toyota..... ![]() Edi: hö ? Jam2: nichts ist unmöglich! |
Inaktiv |
|
![]() Geekboy ![]() Beiträge: 1102 |
# Antwort: 10 - 03.11.2011 um 22:58 Uhr
i dont its truth. u would be the first one ... ------------------ ![]() |
Inaktiv |
|
![]() ![]() VIP - Poster ![]() Herkunft: Barsbüttel Beiträge: 9411 |
# Antwort: 11 - 03.11.2011 um 23:09 Uhr
well, we haven't heard of a clansphere hack for many month now, but i won't guarantee 100% security. on the other hand we should - at first - try to find out what happened in detail. ------------------ ClanSphere - professional clan care starts here |
Inaktiv |
|
![]() Thread-Ersteller Beginner Beiträge: 8 |
# Antwort: 12 - 03.11.2011 um 23:36 Uhr
Refresh my link, they uploaded a image.......... |
Inaktiv |
|
![]() Try to beat me ![]() Herkunft: Northampton Beiträge: 107 |
# Antwort: 13 - 04.11.2011 um 10:09 Uhr
you sure you chmod correctly on my server the chmod is the opposite to what is recommened on csphere instructions ------------------ www.b2g-clan.co.uk European PS3 Clan ![]() |
Inaktiv |
|
![]() ![]() Supporter ![]() Herkunft: Erdeborn bei Lutherstadt Eisleben Beiträge: 3191 |
# Antwort: 14 - 04.11.2011 um 13:08 Uhr
@kerryj88 opposite chmod-settings? i think you are crazy ;-) ------------------ |
Inaktiv |
|
![]() ![]() VIP - Poster ![]() Herkunft: Barsbüttel Beiträge: 9411 |
# Antwort: 15 - 04.11.2011 um 14:10 Uhr
clansphere does only need 755 or higher for the uploads directory and recursive directories in it, depending on the webserver configuration. for other files / directories even 644 and lower can and should be enough. ------------------ ClanSphere - professional clan care starts here |
Inaktiv |
|
![]() Try to beat me ![]() Herkunft: Northampton Beiträge: 107 |
# Antwort: 16 - 06.11.2011 um 00:03 Uhr
04.11.2011 um 13:08 Uhr - ichraffsnicht: @kerryj88 opposite chmod-settings? i think you are crazy ;-) mine are 644 as 755 doesnt work no idea why but i cant even install files with 755 ------------------ www.b2g-clan.co.uk European PS3 Clan ![]() |
Inaktiv |
|
![]() Thread-Ersteller Beginner Beiträge: 8 |
# Antwort: 17 - 14.11.2011 um 10:36 Uhr
I thi nk the problem was the explore module, without it all running good. We received more attacks but all stopped without problem. We disabilited the module. Zuletzt editiert von esse999 am 14.11.2011 um 10:36 Uhr (1x Editiert) |
Inaktiv |
|
![]() ![]() VIP - Poster ![]() Herkunft: Barsbüttel Beiträge: 9411 |
# Antwort: 18 - 14.11.2011 um 20:32 Uhr
the explorer mod can be removed from clansphere without any issues, but clear the cache afterwards. if you get more details or urls on how they tried to hack you please provide them to us so that we can work on a fix. ------------------ ClanSphere - professional clan care starts here |
Inaktiv |
|
Antworten: 18
Seite [1] |
Sie müssen sich registrieren, um zu antworten. |