[NeoStats-Devel] Tip!

"Justin Hammond" <justin-kLev/[email protected]>
Newsgroups gmane.comp.neostats.devel
Message-ID <[email protected]>
Hi All,
Never install phpBB themes's from untrusted sites!

Earlier this year, I was playing around with themes, looking to get
something that made our forums more inline with the rest of the site. I
grabbed a theme from some third party site (Can't remember where now) and
installed it. It actually had some javascript in it, that also posted login
info to another site when using certain versions of IE. It seems that when I
was playing around with it, they grabbed my ID and have access to my account
for a few months (luckly my neostats boards password is different to
everything else)

As a result, he also had used our easymod extension to PHPBB to upload a
mini SQL interface, and god knows what he retrived or what else he had
done... 

So, I dug through backups, and had to roll back to a backup in December 2004
(I only had monthly backups in the ranges that this person had accessed our
forums).... Hence all our hard work sorting out the forums is lost, but I
have no idea what else he has done, hence better to be safer than sorry.

I've also upgraded the forums, but a lot of our extensions are now broken.
I'll try to fix this up soonish...

Cheers

Justin
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.