All4pak.com HACKED

[Shadow008]

Hello every one,today,my forum was hacked by belegit.org (Boxhead) ,they deleted my full db,but good thing i had made backup today =),i asked the hacker,what was the key to access my site to delete and do what ever he wanted,he said,my public_html was writable,my public_html file is chemoded to 755 defaltly ,can any one tell me how can i make it not writable and which would make it hard for hackers to hack,plz reply

 

[Jayzzy]

noobs who hacked ur site..
koi chawal ho ga :D

 

[Shadow008]

noobs who hacked ur site..
koi chawal ho ga :D

yup,lolz :D

 

[kizmark]

Woah!.. Last night you've toLd me that your friend's site was hacked, and now you're the victim.. Got to know how to secure site.. Guys, could someone make a tutorial on how to secure our forums?..

 

[Shadow008]

Woah!.. Last night you've toLd me that your friend's site was hacked, and now you're the victim.. Got to know how to secure site.. Guys, could someone make a tutorial on how to secure our forums?..

yes bro,i didnt now that my forum could hacked like that,lolz,i even added security,but it seems,it wasnt good inaf. please some one add a tutorial to secure there sites,because the number of hackers has increased

 

[bxflow]

Woah!.. Last night you've toLd me that your friend's site was hacked, and now you're the victim.. Got to know how to secure site.. Guys, could someone make a tutorial on how to secure our forums?..

Dont use nullboards and secure your server if using vps/dedicated

 

[Shadow008]

Dont use nullboards and secure your server if using vps/dedicated

lolz,bro,it makes no diffrence,+ how come all hackers forum are using nulled and they have 1000s of enamys,and they dont get hacked :P

 

[faku]

Did you have .htaccess protection for admin panel?
Have you used same password in other places that you use for your forum login?

if you answered No,Yes

then it seems that the attacker just got your password from another site and used it on yours.

 

[Shadow008]

1)Did you have .htaccess protection for admin panel?
2)Have you used same password in other places that you use for your forum login?


Answers:
1) not sure about that,but my admincp directory was renamed to a large number,which was hard to find the admincp 1st :P,and 2nd,my admincp directory was protected by user and password,done by the cpanel :D

2) Nope


the attacker had loged in to my account 3 times,and had changed my pass 3 times,+ demoted my self,and even in that case,it got hacked

 

[faku]

Just noticed your on shared hosting, so it might be that there is nothing wrong whit your site but another site there is unsecure where he got access to others....

 

[Shadow008]

Just noticed your on shared hosting, so it might be that there is nothing wrong whit your site but another site there is unsecure where he got access to others....

oooooooooooooooooooooo ,i remember hacker was something like that

 

[bxflow]

lolz,bro,it makes no diffrence,+ how come all hackers forum are using nulled and they have 1000s of enamys,and they dont get hacked :P

So you are telling me using a null board is just as safe as using the legit script?

Nah Man.

Its also depends what plugins you have on your forums, as some plugins have security holes
it could also be your hosting

 

[Shadow008]

So you are telling me using a null board is just as safe as using the legit script?

Nope,i never said that :P,+ i did had 1 plugin,its the plugin which shows latest threads,i sow it that it was hackable,but i didnt now people would hack that even LOL :P

 

[sloddl]

chmod 666... but this shouldn't be the reason why you got hacked if you ask me... you got some other hole somewhere.

 

[Shadow008]

chmod 666... but this shouldn't be the reason why you got hacked if you ask me... you got some other hole somewhere.

Forbidden

You don't have permission to access / on this server.

Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.

i got that error above

 

[bxflow]

lol dont set your public_html to 644 that would block access to the site to everyone

 

[Shadow008]

lol dont set your public_html to 644 that would block access to the site to everyone

Forbidden

You don't have permission to access / on this server.

Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.

i got that error above when i made it to 666

 

[awaiz007]

If you are on a shared hosting server, make sure all your vBulletin PHP files are chmod 644

 

[Shadow008]

If you are on a shared hosting server, make sure all your vBulletin PHP files are chmod 644

thanks bro

 

[Cooper]

noobs who hacked ur site..
koi chawal ho ga

Well if the site was hacked because security sucks then it makes the owner noob not the hacker lol