http://www.browndwarf.com/ hacked?

Discussion in 'Directories' started by aspidov, Jun 21, 2007.

Thread Status:
Not open for further replies.
0
Page 1 of 2
  1. #1
    wtf? :confused:
     
    aspidov, Jun 21, 2007 IP
    aaron_nimocks likes this.
  2. an0n

    an0n Prominent Member

    Messages:
    5,688
    Likes Received:
    915
    Best Answers:
    0
    Trophy Points:
    360
    #2
    Somebody notify aaron_nimocks.

    Feel bad for the guy because he just got over some crap only a week/ week and a half ago. =/
     
    an0n, Jun 21, 2007 IP
  3. aspidov

    aspidov Well-Known Member

    Messages:
    2,875
    Likes Received:
    272
    Best Answers:
    0
    Trophy Points:
    175
    #3
    Already did.

    Yeah i remember him being hacked with phpld before, maybe its time to change the host?
     
    aspidov, Jun 21, 2007 IP
  4. loredan

    loredan Well-Known Member

    Messages:
    1,647
    Likes Received:
    238
    Best Answers:
    0
    Trophy Points:
    185
    #4
    Holy Christ!

    Why these sort of things are happening only to good guys? :(
     
    loredan, Jun 21, 2007 IP
  5. bacanze

    bacanze Peon

    Messages:
    2,419
    Likes Received:
    127
    Best Answers:
    0
    Trophy Points:
    0
    #5
    yeah that is bad, probably used RFI.
     
    bacanze, Jun 21, 2007 IP
  6. pipes

    pipes Prominent Member

    Messages:
    12,766
    Likes Received:
    958
    Best Answers:
    0
    Trophy Points:
    360
    #6
    He is in the forces isn't he, he maybe gets targetted for that, im not saying people need to hide what they do, but on the internet, well you know what i mean.

    Ive seen it a few times before, maybe not related to that of course, but worth taking into account.
     
    pipes, Jun 21, 2007 IP
  7. aaron_nimocks

    aaron_nimocks Im kind of a big deal Staff

    Messages:
    5,563
    Likes Received:
    627
    Best Answers:
    0
    Trophy Points:
    420
    #7
    Thanks for the heads up. Only wish I knew how to fix it. :(

    The index.php is fine and theres no redirect in the <head> tags.
     
    aaron_nimocks, Jun 21, 2007 IP
  8. Velocity

    Velocity Well-Known Member

    Messages:
    1,343
    Likes Received:
    142
    Best Answers:
    0
    Trophy Points:
    135
    #8
    Aaron, check the header.tpl in your template folder.
     
    Velocity, Jun 21, 2007 IP
  9. Permoney

    Permoney Active Member

    Messages:
    360
    Likes Received:
    28
    Best Answers:
    0
    Trophy Points:
    70
    #9
    it seems all pages are redirecting main page even http://www.browndwarf.com/buy.html. So look at the htaccess or some page which included in all pages. Maybe they could change something on it.

    ps: I blushed for this (I am from Turkey too) and can't understand why these people hack website!!
     
    Permoney, Jun 21, 2007 IP
  10. aaron_nimocks

    aaron_nimocks Im kind of a big deal Staff

    Messages:
    5,563
    Likes Received:
    627
    Best Answers:
    0
    Trophy Points:
    420
    #10
    I already checked header.tpl and all .htaccess

    Nothing :(

    Guess I need to leave this one up to Hostgator.
     
    aaron_nimocks, Jun 21, 2007 IP
  11. aaron_nimocks

    aaron_nimocks Im kind of a big deal Staff

    Messages:
    5,563
    Likes Received:
    627
    Best Answers:
    0
    Trophy Points:
    420
    #11
    Found it.

    They completely changed config.php

    I feel like an idiot sometimes when I am sitting here thinking on what to check next and it hits me to check the modified date on the files. Last file modified is the one that was changed, right? Well yes it was.

    All back to normal now.
     
    aaron_nimocks, Jun 21, 2007 IP
  12. Velocity

    Velocity Well-Known Member

    Messages:
    1,343
    Likes Received:
    142
    Best Answers:
    0
    Trophy Points:
    135
    #12
    good to see you have it up and running.

    @pipes, these guys go around hacking everything, so I don't think it has anything to do with that.

    spy-h.net/top50
     
    Velocity, Jun 21, 2007 IP
  13. aspidov

    aspidov Well-Known Member

    Messages:
    2,875
    Likes Received:
    272
    Best Answers:
    0
    Trophy Points:
    175
    #13
    that was fast.
     
    aspidov, Jun 21, 2007 IP
  14. aaron_nimocks

    aaron_nimocks Im kind of a big deal Staff

    Messages:
    5,563
    Likes Received:
    627
    Best Answers:
    0
    Trophy Points:
    420
    #14
    Only thanks to you! :)
     
    aaron_nimocks, Jun 21, 2007 IP
  15. pipes

    pipes Prominent Member

    Messages:
    12,766
    Likes Received:
    958
    Best Answers:
    0
    Trophy Points:
    360
    #15
    Velocity, true, true, never pleasant to see it happen, pleased you have it sorted aaron_nimocks.
     
    pipes, Jun 21, 2007 IP
  16. sachin410

    sachin410 Illustrious Member

    Messages:
    6,422
    Likes Received:
    573
    Best Answers:
    0
    Trophy Points:
    410
    #16
    How to prevent this for happening? Any tips from experts? :eek:.
     
    sachin410, Jun 21, 2007 IP
  17. aaron_nimocks

    aaron_nimocks Im kind of a big deal Staff

    Messages:
    5,563
    Likes Received:
    627
    Best Answers:
    0
    Trophy Points:
    420
    #17
    Dont think so. They hack into all types of sites.

    But Ill post here what hostgator tells me when they are done looking at it and the info may help. But probably wont.
     
    aaron_nimocks, Jun 21, 2007 IP
  18. Velocity

    Velocity Well-Known Member

    Messages:
    1,343
    Likes Received:
    142
    Best Answers:
    0
    Trophy Points:
    135
    #18
    Hopefully there isn't some security hole in phplinkbid we are not aware of.
    Aaron, did you drop writing permissions to config.php after installation?
     
    Velocity, Jun 21, 2007 IP
  19. aaron_nimocks

    aaron_nimocks Im kind of a big deal Staff

    Messages:
    5,563
    Likes Received:
    627
    Best Answers:
    0
    Trophy Points:
    420
    #19
    Its set at 666 right now which dont seem right. Should be 644 right?

    Also I wouldnt set it to 666, always do 777 when doing write permissions.
     
    aaron_nimocks, Jun 21, 2007 IP
  20. Velocity

    Velocity Well-Known Member

    Messages:
    1,343
    Likes Received:
    142
    Best Answers:
    0
    Trophy Points:
    135
    #20
    No,

    I believe it should be 444. Someone correct me if I am wrong?
     
    Velocity, Jun 21, 2007 IP
Page 1 of 2
Thread Status:
Not open for further replies.