Attack On MySQL Help Please

Discussion in 'MySQL' started by usf, Mar 22, 2010.

  1. #1
    Sir I have phpbb2 forum which in on linux whm server. some one try to hack it.
    How to stop these sql injections and server security mode. I have csf firewall.

    Please suggest. Thanks
     
    usf, Mar 22, 2010 IP
  2. PsyHost

    PsyHost Well-Known Member

    Messages:
    641
    Likes Received:
    7
    Best Answers:
    0
    Trophy Points:
    110
    #2
    sit back and let csf handle the excessive connections, or ask your host to firewall the adress performing the attacks.

    If its sql injections then make sure your phpbb is fully patched for any known exploits.
     
    PsyHost, Mar 22, 2010 IP
  3. jestep

    jestep Prominent Member

    Messages:
    3,659
    Likes Received:
    215
    Best Answers:
    19
    Trophy Points:
    330
    #3
    Good thing you have CSF, but I wouldn't just stop at having it active.

    Make sure you have mod security enabled. Also, make sure CSF bans the malicious user after 5 failures or so. Definitely be sure you are current on the version of phpbb2, MySQL, PHP, Apache, and every other package the server uses. Also, make sure you go through the "check server security" link and fix any major issues.
     
    jestep, Mar 22, 2010 IP
  4. Gomah

    Gomah Greenhorn

    Messages:
    51
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    16
    #4
    Try to change prefixes, and update to phpBB3. ;)
     
    Gomah, Mar 22, 2010 IP