Problem with editing posts - hacked?

This is an archive of the phpBB 2.0.x support forum. Support for phpBB2 has now ended.
Forum rules
Following phpBB2's EoL, this forum is now archived for reference purposes only.
Please see the following announcement for more information: viewtopic.php?f=14&t=1385785
Locked
User avatar
thalador
Registered User
Posts: 23
Joined: Tue Sep 21, 2004 8:20 pm

Problem with editing posts - hacked?

Post by thalador » Wed Oct 05, 2005 2:18 am

I came online tonight to find a number of posts have been edited, erased etc. Is there any way in the db to see who edited the posts?

Please, someone give me an idea where to look

User avatar
Marshalrusty
Project Manager
Project Manager
Posts: 29253
Joined: Mon Nov 22, 2004 10:45 pm
Location: New York City
Name: Yuriy Rusko
Contact:

Re: Problem with editing posts - hacked?

Post by Marshalrusty » Wed Oct 05, 2005 2:33 am

thalador wrote: I came online tonight to find a number of posts have been edited, erased etc. Is there any way in the db to see who edited the posts?

Please, someone give me an idea where to look

No, there is no way to see who edited the posts. What version of phpBB are you running?
Have comments/praise/complaints/suggestions? Please feel free to PM me.

Need private help? Hire me for all your phpBB and web development needs

User avatar
thalador
Registered User
Posts: 23
Joined: Tue Sep 21, 2004 8:20 pm

Post by thalador » Wed Oct 05, 2005 2:37 am

2.0.14.. there is no way in the mysql to track changes?

User avatar
Marshalrusty
Project Manager
Project Manager
Posts: 29253
Joined: Mon Nov 22, 2004 10:45 pm
Location: New York City
Name: Yuriy Rusko
Contact:

Post by Marshalrusty » Wed Oct 05, 2005 2:43 am

thalador wrote: 2.0.14.. there is no way in the mysql to track changes?

No.
Last edited by Marshalrusty on Wed Oct 05, 2005 2:49 am, edited 1 time in total.
Have comments/praise/complaints/suggestions? Please feel free to PM me.

Need private help? Hire me for all your phpBB and web development needs

User avatar
thalador
Registered User
Posts: 23
Joined: Tue Sep 21, 2004 8:20 pm

Post by thalador » Wed Oct 05, 2005 2:44 am

Well isnt that just useful

AnthraX101
Security Consultant
Posts: 497
Joined: Sun Nov 14, 2004 8:05 pm
Contact:

Post by AnthraX101 » Wed Oct 05, 2005 2:47 am

thalador wrote: 2.0.14.. there is no way in the mysql to track changes?


You need to update to 2.0.17, all previous versions have publicly disclosed vulnerabilities.

AnthraX101
Last edited by AnthraX101 on Wed Oct 05, 2005 2:48 am, edited 1 time in total.

RustIndy
Registered User
Posts: 10
Joined: Wed Oct 05, 2005 1:28 am

Post by RustIndy » Wed Oct 05, 2005 2:48 am

There's a mod over at phpbbhacks.com that logs moderator actions, but it won't reveal anything that happened before it's installed.

Other than that, check your web server logs and see if there were a large number of errors logged during the time period (sure sign of a brute-force or password-guessing attack), or someone calling up admin pages from an IP address that doesn't belong to a moderator or administrator.

Thallium
Registered User
Posts: 395
Joined: Mon Aug 30, 2004 12:30 am
Contact:

Post by Thallium » Wed Oct 05, 2005 2:48 am

You should update to 2.0.17 asap. This will prevent the known security threats. There are also a couple good security mods out there, and a couple drop-in scripts you can use to increase the security of your board.

While you can't track what has already happened you can prevent it from happening again - Update to current version.

---Thallium
Complete phpBB powered websites, Mods/Hacks installed, unique templates, updates and repairs... reasonable. Email, PM or IM.

User avatar
thalador
Registered User
Posts: 23
Joined: Tue Sep 21, 2004 8:20 pm

Post by thalador » Wed Oct 05, 2005 4:53 am

Problem is I am running a nukecops version.. My programmer left so I am stuck out in the cold here as far as upgrading goes

iotc247
Registered User
Posts: 414
Joined: Wed Feb 11, 2004 5:22 pm
Location: Florida
Contact:

Post by iotc247 » Wed Oct 05, 2005 4:59 am

Nukecops is a phpnuke community. phpBB.com does not support PHP-Nuke. However there is a phpBB 2.0.17 port upgrade for Nuke.
- Support Links -
[ Support Template ] :: [ Knowledge Base ] :: [ Modification Search ]

User avatar
thalador
Registered User
Posts: 23
Joined: Tue Sep 21, 2004 8:20 pm

Post by thalador » Wed Oct 05, 2005 5:24 am

One thing I noticed, when a post was edited in the past the following would be added at the bottom

Last edited by <username> on Sun 30Jan2005 1959; edited 13 times in total

Where is that in the code and why would it stop working?

cybrid23
Former Team Member
Posts: 9877
Joined: Wed Jun 29, 2005 5:55 am
Location: Somewhere in the Midwest...
Contact:

Post by cybrid23 » Wed Oct 05, 2005 5:39 am

iotc247 wrote: Nukecops is a phpnuke community. phpBB.com does not support PHP-Nuke. However there is a phpBB 2.0.17 port upgrade for Nuke.


They radically change the code for their needs. It could have stopped for any number of reasons. You need to ask where you got it
---Never leave home without a towel and your peril sensitive sunglasses.
---Do Not PM Me For Support. It will go unanswered.
Thanks.

User avatar
thalador
Registered User
Posts: 23
Joined: Tue Sep 21, 2004 8:20 pm

Post by thalador » Wed Oct 05, 2005 5:40 am

cybrid23 wrote:
iotc247 wrote:Nukecops is a phpnuke community. phpBB.com does not support PHP-Nuke. However there is a phpBB 2.0.17 port upgrade for Nuke.


They radically change the code for their needs. It could have stopped for any number of reasons. You need to ask where you got it


We got it 3 years ago or so. It has been updated to 2.0.14.. Even if the code has changed, where is it in normal phpbb

cybrid23
Former Team Member
Posts: 9877
Joined: Wed Jun 29, 2005 5:55 am
Location: Somewhere in the Midwest...
Contact:

Post by cybrid23 » Wed Oct 05, 2005 5:45 am

You are not listening.

They modify the code. They add things, they change things, they move things.

No one here has any way of knowing where it would be in a phpnuke version.

Only the 'vanilla' version downloaded from here is supported here.
---Never leave home without a towel and your peril sensitive sunglasses.
---Do Not PM Me For Support. It will go unanswered.
Thanks.

User avatar
thalador
Registered User
Posts: 23
Joined: Tue Sep 21, 2004 8:20 pm

Post by thalador » Wed Oct 05, 2005 5:51 am

No, you arent listening. I know it isnt supported thats why I said
Even if the code has changed, where is it in normal phpbb


All I wanted was where in vanilla it is

Locked

Return to “2.0.x Support Forum”