Topic: Hacked!

[Lum-chan]

Last night we were hacked! Thank god, it was only a deface. As far as I could see, no data was stolen or downloaded. To prevent this in the future I decided to change the management passwords and changed them as well from the hosting company too. Also, the passwords for the databases have been changed and this included all my local passwords.

Until now, I have no clue on how this did happen as I installed all security fixes on all sections of the site  It may look like some kind of security hole somewhere...

Edit:
Found the problem! Some remains of an very old installation of TP 0.98 caused this hack. Accordingly to the logfiles nothing was downloaded, no userdata has been exported, luckily! Only uploaded the deface and after that the removal of the obsolute/faulty code (which contained the security-problem). Phew! Made new and fresh backup's of all the content after cleaning up some out-dated stuff.

Somehow I missed this problem on the TP support boards. I'm sorry for this 


Let's hope this doesn't happen again... sigh...

[foxhead556]

Thank god that noting major happened :X And thanks Lum-chan for the site secure :D

[Lum-chan]

You're welcome!

I hope this action will keep hackers a bit away. Dit did re-check the logs but couldn't find any actions on downloading data, so I guess we're safe on this.

Luckily we were down for only 2-3 hours before I discovered it. It's good to have some very recent backups. They were only 4 hours old. I love my current hosting company!

[janus]

hackers will always find a security hole. good think you caught it in time. thank you

[Lum-chan]

Yes, that's why sucurity updates are so damn important to install as soon as possible.