phpBB2Refugees.com Logo
Not affiliated with or endorsed by the phpBB Group

Register •  Login 

Continue the legacy...

Welcome to all phpBB2 Refugees!Wave Smilie

This site is intended to continue support for the legacy 2.x line of the phpBB2 bulletin board package. If you are a fan of phpBB2, please, by all means register, post, and help us out by offering your suggestions. We are primarily a community and support network. Our secondary goal is to provide a phpBB2 MOD Author and Styles area.

phpbb2 site attacked... posts unreadable

Goto page Previous  1, 2
 
Search this topic... | Search General Support... | Search Box
Register or Login to Post    Index » General Support  Previous TopicPrint TopicNext Topic
Author Message
Citrix
Board Member



Joined: 19 Feb 2012

Posts: 42



PostPosted: Wed Feb 22, 2012 4:24 am 
Post subject: Re: phpbb2 site attacked... posts unreadable

Anyway, I have been looking in the Word Table and could not find anything I didn't put in.
Someone suggested that early on. And again today on phpbb forum, it was suggested again.

So I went to looking again, this time through the database instead of the control panel.

I found a blank entry with a bunch of stars for replacement. I don't remember adding such a thing:
Code:
Edit| Edit Inline |Edit |Copy |Delete |132 |    |*****

Note the blank entry in the column between 132 and *****
I deleted it. Went back to the forum and all the junk stars were gone.

It's a mystery to me how someone could add anything to that table. If he's done it once, he will do it again, and again, and again, unless I found out how he does it.

THANK YOU..
Back to top
dogs and things
Board Member



Joined: 18 Nov 2008

Posts: 621
Location: Spain


flag
PostPosted: Wed Feb 22, 2012 5:44 am 
Post subject: Re: phpbb2 site attacked... posts unreadable

If there is or was more than one person with access to the Admin Panel the "hacker" is likely to be among them.
_________________
phpBB2 will never die, I hope!
Back to top
Jim_UK
Board Member



Joined: 19 Nov 2008

Posts: 551
Location: North West UK


flag
PostPosted: Wed Feb 22, 2012 8:32 am 
Post subject: Re: phpbb2 site attacked... posts unreadable

Some of the early phpBB attacks involved changes to anything that was a description. Check the contents of "Board Description" and Forum descriptions.
Those attacks usually involved redirects to other sites or scripts.
Those descriptions are in the database.
The starfoxtj toolkit did a check on all descriptions and highlighted any possible exploits.

Jim

I have tried to attach the toolkit but attachments are still not working
Back to top
Citrix
Board Member



Joined: 19 Feb 2012

Posts: 42



PostPosted: Wed Feb 22, 2012 3:29 pm 
Post subject: Re: phpbb2 site attacked... posts unreadable

Quote:
Some of the early phpBB attacks involved changes to anything that was a description. Check the contents of "Board Description" and Forum descriptions.
Thanks.. I'll check that.
Quote:
I have tried to attach the toolkit but attachments are still not working
Thanks for the idea. I avoided the attachment Mod.. didn't want people to upload any picture in my database. Maybe with a closer look, we can change the Mod to give allow only a few people to have privilege to use it.

dogs and things wrote:
If there is or was more than one person with access to the Admin Panel the "hacker" is likely to be among them.
Never given acces to Control Panel to anyone. Unless someone gave access to himself. icon_sad.gif
Back to top
Jim_UK
Board Member



Joined: 19 Nov 2008

Posts: 551
Location: North West UK


flag
PostPosted: Wed Feb 22, 2012 3:39 pm 
Post subject: Re: phpbb2 site attacked... posts unreadable

Your fist task now should be to update the phpBB2 to the latest release version 2.0.23, change all your passwords - Board and Cpanel
Do regular backups so that you can recover from such attacks quickly.

I see that it was in the word censor as I originally suggested.

Jim
Back to top
Citrix
Board Member



Joined: 19 Feb 2012

Posts: 42



PostPosted: Wed Feb 22, 2012 3:44 pm 
Post subject: Re: phpbb2 site attacked... posts unreadable

Quote:
I see that it was in the word censor as I originally suggested.
YES... And I did check before joining this board.
But I was looking at it from the ACP. I don't think the codes on ACP list blank entry in the Words table. That's probably why I could not see it.. But the first time I looked directly in the database, there it was, a weird row. Why would I replace blank space with ****** ? I think something was hidden in the blank space.
Back to top
Jim_UK
Board Member



Joined: 19 Nov 2008

Posts: 551
Location: North West UK


flag
PostPosted: Wed Feb 22, 2012 3:55 pm 
Post subject: Re: phpbb2 site attacked... posts unreadable

Yes that is quite likely. There were incidents were you could not locate a spammer in the Admin CP user admin section to delete them as their username was not what it appeared to be. A search came up with no results. They were using some sort of characters that did not show. You could however still delete them with the Starfoxtj Admin toolkit.
If you want it email me via the link in this post and I will send it to you.
Just open in a text editor and near the top is a section where you enter an admin username and then ftp to the phpBB2 directory.

Jim
Back to top
Citrix
Board Member



Joined: 19 Feb 2012

Posts: 42



PostPosted: Wed Feb 22, 2012 5:01 pm 
Post subject: Re: phpbb2 site attacked... posts unreadable

I'll send it when I leave office... thanks
Back to top
Citrix
Board Member



Joined: 19 Feb 2012

Posts: 42



PostPosted: Thu Feb 23, 2012 1:59 am 
Post subject: Re: phpbb2 site attacked... posts unreadable

editing...
I think all is cleaned for now..

deleted the message here in this post.
Back to top
Jim_UK
Board Member



Joined: 19 Nov 2008

Posts: 551
Location: North West UK


flag
PostPosted: Thu Feb 23, 2012 9:06 am 
Post subject: Re: phpbb2 site attacked... posts unreadable

I have just emailed you the Starfoxtj Admin Toolkit.

Jim
Back to top
Citrix
Board Member



Joined: 19 Feb 2012

Posts: 42



PostPosted: Thu Feb 23, 2012 2:30 pm 
Post subject: Re: phpbb2 site attacked... posts unreadable

Thank you.. I'll process it when I get home tonight.
Back to top
Display posts from previous:   
Register or Login to Post    Index » General Support  Previous TopicPrint TopicNext Topic
Page 2 of 2 All times are GMT
Goto page Previous  1, 2
 
Jump to:  

Index • About • FAQ • Rules • Privacy • Search •  Register •  Login 
Not affiliated with or endorsed by the phpBB Group
Powered by phpBB2 © phpBB Group
Generated in 0.0272 seconds using 15 queries. (SQL 0.0021 Parse 0.0009 Other 0.0242)
phpBB Customizations by the phpBBDoctor.com
Template Design by DeLFlo and MomentsOfLight.com Moments of Light Logo