Problem with editing posts - hacked?

thalador · Post by **thalador** » Wed Oct 05, 2005 2:18 am

I came online tonight to find a number of posts have been edited, erased etc. Is there any way in the db to see who edited the posts?

Please, someone give me an idea where to look

Post by **Marshalrusty** » Wed Oct 05, 2005 2:33 am

thalador wrote: I came online tonight to find a number of posts have been edited, erased etc. Is there any way in the db to see who edited the posts?

Please, someone give me an idea where to look

No, there is no way to see who edited the posts. What version of phpBB are you running?

thalador · Post by **thalador** » Wed Oct 05, 2005 2:37 am

2.0.14.. there is no way in the mysql to track changes?

Post by **Marshalrusty** » Wed Oct 05, 2005 2:43 am

thalador wrote: 2.0.14.. there is no way in the mysql to track changes?

No.

thalador · Post by **thalador** » Wed Oct 05, 2005 2:44 am

Well isnt that just useful

AnthraX101 · Post by **AnthraX101** » Wed Oct 05, 2005 2:47 am

thalador wrote: 2.0.14.. there is no way in the mysql to track changes?

You need to update to 2.0.17, all previous versions have publicly disclosed vulnerabilities.

AnthraX101

RustIndy · Post by **RustIndy** » Wed Oct 05, 2005 2:48 am

There's a mod over at phpbbhacks.com that logs moderator actions, but it won't reveal anything that happened before it's installed.

Other than that, check your web server logs and see if there were a large number of errors logged during the time period (sure sign of a brute-force or password-guessing attack), or someone calling up admin pages from an IP address that doesn't belong to a moderator or administrator.

Thallium · Post by **Thallium** » Wed Oct 05, 2005 2:48 am

You should update to 2.0.17 asap. This will prevent the known security threats. There are also a couple good security mods out there, and a couple drop-in scripts you can use to increase the security of your board.

While you can't track what has already happened you can prevent it from happening again - Update to current version.

---Thallium

thalador · Post by **thalador** » Wed Oct 05, 2005 4:53 am

Problem is I am running a nukecops version.. My programmer left so I am stuck out in the cold here as far as upgrading goes

iotc247 · Post by **iotc247** » Wed Oct 05, 2005 4:59 am

Nukecops is a phpnuke community. phpBB.com does not support PHP-Nuke. However there is a phpBB 2.0.17 port upgrade for Nuke.

thalador · Post by **thalador** » Wed Oct 05, 2005 5:24 am

One thing I noticed, when a post was edited in the past the following would be added at the bottom

Last edited by <username> on Sun 30Jan2005 1959; edited 13 times in total

Where is that in the code and why would it stop working?

cybrid23 · Post by **cybrid23** » Wed Oct 05, 2005 5:39 am

iotc247 wrote: Nukecops is a phpnuke community. phpBB.com does not support PHP-Nuke. However there is a phpBB 2.0.17 port upgrade for Nuke.

They radically change the code for their needs. It could have stopped for any number of reasons. You need to ask where you got it

thalador · Post by **thalador** » Wed Oct 05, 2005 5:40 am

cybrid23 wrote:
iotc247 wrote:Nukecops is a phpnuke community. phpBB.com does not support PHP-Nuke. However there is a phpBB 2.0.17 port upgrade for Nuke.

They radically change the code for their needs. It could have stopped for any number of reasons. You need to ask where you got it

We got it 3 years ago or so. It has been updated to 2.0.14.. Even if the code has changed, where is it in normal phpbb

cybrid23 · Post by **cybrid23** » Wed Oct 05, 2005 5:45 am

You are not listening.

They modify the code. They add things, they change things, they move things.

No one here has any way of knowing where it would be in a phpnuke version.

Only the 'vanilla' version downloaded from here is supported here.

thalador · Post by **thalador** » Wed Oct 05, 2005 5:51 am

No, you arent listening. I know it isnt supported thats why I said

Even if the code has changed, where is it in normal phpbb

All I wanted was where in vanilla it is

advertisements