Hack attack

Isn't that because it's TV Forum's 4th birthday?

Now it makes sense.

Why I never thought of that before, I don't know.

No, Simon. YOU are a pantomime.

Asa, if you wish to prevent future hacks, I would update to phpBB version 2.0.13 instead of your current 2.0.5. It doesn't matter if your mods stop working temporarily, they can be fixed.

I think that it has been updated but some of footers hasn't been updated due to them being part of php coding

Yes but the footer is generated by phpBB. I also don't see what it being written in php would have to it not being updated.

If I recall correctly the plan was to update the place when phpBB 2.2 was realsed and not before, clearly this plan appears to be flawed.

But there are times the footer is

Powered by phpBB © 2001, 2005 phpBB Group

and there times its

Powered by phpBB 2.0.5 © 2001 phpBB Group

I also seen

Powered by phpBB © 2001 phpBB Group

Anyway,

let hope that Asa will say something about it and keep back-ups of the forum including the database

Hah!

A recent backup has been done of the database for testing on my own PC luckily enough. I guess I should be thankful the hacker didn't do much worse.

I think the software installation is a bit slap dash with different versions which no doubt present potential exploiting. I was going to wait until 2.2 (although that seems to be forever in waiting) but will do a total refresh probably tomorrow.

EDIT: I've just seen what I guess the exploit was on the phpBB site which I've temporarily fixed.

Cheers, Asa

Did he get your password or get in throught the security loop hole??

I think this hacker is tring to proove a point on these forums, He hasn't done anything to harm the forums that he has left his"trademark" on......

OK Asa. Updating your version of phpBB was just an idea but it will sort out some security problems. Also, I don't know if you read it on the phpBB website but 2.2 is going to be replaced by 3.0 'Olympus'. I downloaded a development copy off phpBB area51 and installed it onto my test server. It is a lot more complex then the 2.0.x series and harder to manage if you don't know how to use the new version. Also, the styles system has been totally rewitten meaning the TV Forum look and feel will have to be rewritten but you will probably have to make some changes. Just letting you know.

I believe the bug that allowed bOlE82 to gain admin rights was fixed in version 2.0.12/13, if I read right.

For the rest of you, the version number on the footer is generated by phpBB but the rest is in the footer file. Version 2.0.12 stopped reading the version number hence recently updated forums no longer reading that. The copyright info (years) was updated in the subSilver theme but other themes neeed to be updated manually.

P.S. Happy 4th birthday TV Forum.

Apart from the fact I don't have the relevant knowledge, I wouldn't ever deface anyone else's work. If I had a grievance I'd go through the proper channels.