Waraxe IT Security Portal

Harry · Regular user

www.nuke100.com was exploited by someone yesterday, it wasnt any of the exploits listed here....anyone aware of the new exploit?

shane · Beginner

hmm...

reet, well guys, nuke100 is my site.

when i first iinstalled it using nuke 7.3 i did have it checked out for sql injections etc by a few of the guys from nukecops, and got the green light saying that everthingwas kool.

but last week i was defaced on the front page.. no biggie, i can handle that, i even admire the cheek of a hacker sometimes, because the message said, that they could have done more if they had wanted.

the problem is... they sent a newsletter to each and everyone of members asking them to "download a freesms.exe" file. which i would be presuming would end up being a trojan or even worse a possible premium rate dialler software.

which has opened my eyes, because i always assumed the hacking was for a little fun by script kiddies.. obviously its a multi million pound industry for scammers with the ?1.50 per minute diallers nowadays.. scary.

but that aside.. what the hell can i do to protect myself ??

i have removed the admin.php file now (not renamed, but deleted all together until i need it, when i then upload it again) i have also done the same with all my admin modules, is this enough?

any ideas appreciated.

cheers

shane.

Harry · Regular user

Deleting admin.php is fine...I would rather password protect my admin.php using a .htaccess.... you got a cool site.... theres one flaw on ur site tho..anyone can cheat by voting multiple times frm same ip within 24 hrs....you need to care of tht Wink

tokugawa · Beginner

Hellow, remove admin.php isn`t necesary, with the .htaccess and .htpasswd files you can restrict access to any file with password or generating 403 error.

in http://slp.cl you can find manual for htaccess and htpasswd uses on apache servers, or you can read the apache manual, downolad from http://apache.org.

Sorry for mu bad English, but my language es the Spanish and the English language education in the Estatal Schools are Bad, i'm learning speak "This is a Window, this is a door, this is a pencil" jaajj the education of english language is very bad.