Re: [NeoStats-Devel] Tip!

I made a backup of the board (after the posts had been removed), so have the
changes to the forum sections listed here locally, I'll start working on
adding them back in manually now , unless you want me to wait a while for
that.

DNB

----- Original Message ----- 
From: "Justin Hammond" <justin-kLev/[email protected]>
To: <[email protected]>
Sent: Sunday, April 17, 2005 6:23 PM
Subject: [NeoStats-Devel] Tip!


Hi All,
Never install phpBB themes's from untrusted sites!

Earlier this year, I was playing around with themes, looking to get
something that made our forums more inline with the rest of the site. I
grabbed a theme from some third party site (Can't remember where now) and
installed it. It actually had some javascript in it, that also posted login
info to another site when using certain versions of IE. It seems that when I
was playing around with it, they grabbed my ID and have access to my account
for a few months (luckly my neostats boards password is different to
everything else)

As a result, he also had used our easymod extension to PHPBB to upload a
mini SQL interface, and god knows what he retrived or what else he had
done...

So, I dug through backups, and had to roll back to a backup in December 2004
(I only had monthly backups in the ranges that this person had accessed our
forums).... Hence all our hard work sorting out the forums is lost, but I
have no idea what else he has done, hence better to be safer than sorry.

I've also upgraded the forums, but a lot of our extensions are now broken.
I'll try to fix this up soonish...

Cheers

Justin



---------------------------------------------------------------------
To unsubscribe, e-mail: devel-unsubscribe-wool9L35kifE9wlyV4mCnKxOck334EZe@public.gmane.org
For additional commands, e-mail: [email protected]