I need help to protect my site

Discuss the many weaknesses of browser security and ways to mitigate the threat

I need help to protect my site

Post by the w on Mon Aug 01, 2011 11:00 am
([msg=60394]see I need help to protect my site[/msg])

Hi, guys.

I have a big problem i can`t protect my site.
Forum system is invision power board 3.1.4.
I tried to protect Administration Control Panel etc, but the result was the same.
If you can give some advice.

Thanks in advance...
the w
New User
New User
 
Posts: 4
Joined: Mon Aug 01, 2011 10:52 am
Blog: View Blog (0)


Re: I need help to protect my site

Post by mShred on Mon Aug 01, 2011 12:14 pm
([msg=60398]see Re: I need help to protect my site[/msg])

We need a lot more information. What attacks is the attacker using? Webserver? Web services? What is the ending result of attacks? We can't help you without more info.
Image

For those about to rock.
User avatar
mShred
Administrator
Administrator
 
Posts: 1687
Joined: Tue Jun 22, 2010 4:22 pm
Blog: View Blog (2)


Re: I need help to protect my site

Post by the w on Mon Aug 01, 2011 1:23 pm
([msg=60404]see Re: I need help to protect my site[/msg])

So my site wasn`t hacked. He was be download. Now I worry that there will second attack, which can crash the entire system. I expect many more attacks, because to us every second site was hacked, we have something like the internet mafia . I use shared hosting, does vps, because i don`t have money to pay vps.

Sorry I can not explain properly, but do not speak English very well, because I am from Bulgaria.
the w
New User
New User
 
Posts: 4
Joined: Mon Aug 01, 2011 10:52 am
Blog: View Blog (0)


Re: I need help to protect my site

Post by mShred on Mon Aug 01, 2011 1:38 pm
([msg=60405]see Re: I need help to protect my site[/msg])

the w wrote:He was be download

I'm not so sure i understand.. Try to explain everything that happened and what makes you believe that you're system is being compromised.
Image

For those about to rock.
User avatar
mShred
Administrator
Administrator
 
Posts: 1687
Joined: Tue Jun 22, 2010 4:22 pm
Blog: View Blog (2)


Re: I need help to protect my site

Post by the w on Mon Aug 01, 2011 1:56 pm
([msg=60406]see Re: I need help to protect my site[/msg])

The man who took my sql know him and he said i can easy be hacked.
I put the htaccess in admin panel. I changed the name and I have activated all Security Tools by admin panel.
Also, use different passwords generated and I did a master password of mozilla firefox
What more i can do ?
the w
New User
New User
 
Posts: 4
Joined: Mon Aug 01, 2011 10:52 am
Blog: View Blog (0)


Re: I need help to protect my site

Post by mShred on Mon Aug 01, 2011 2:06 pm
([msg=60407]see Re: I need help to protect my site[/msg])

the w wrote:The man who took my sql know him and he said i can easy be hacked.
I put the htaccess in admin panel. I changed the name and I have activated all Security Tools by admin panel.
Also, use different passwords generated and I did a master password of mozilla firefox
What more i can do ?

I'm not sure what i can take out of that.. If you have an SQL Injection vulnerability, then you need to properly sanitize your queries. It probably wouldn't be a bad idea to hire some pen-testers, that way you can have some of the good guys find vulnerabilities and tell you what you need to do.
Image

For those about to rock.
User avatar
mShred
Administrator
Administrator
 
Posts: 1687
Joined: Tue Jun 22, 2010 4:22 pm
Blog: View Blog (2)


Re: I need help to protect my site

Post by Phantom Wolf on Mon Aug 01, 2011 2:35 pm
([msg=60409]see Re: I need help to protect my site[/msg])

mShred wrote:It probably wouldn't be a bad idea to hire some pen-testers, that way you can have some of the good guys find vulnerabilities and tell you what you need to do.

If you give us the link to your site, and prove you own it (by putting a comment in the source somewhere), several users here will test your site's security. However, if your site's in Bulgarian, then we might not do so good a job. If you're really worried about your security, you should hire professionals
"Well it isn't my fault. I shouldn't have been allowed to do something to crash it." "No, you shouldn't have been allowed to buy a computer in the first place"
Phantom Wolf
Poster
Poster
 
Posts: 271
Joined: Wed Mar 03, 2010 8:45 pm
Blog: View Blog (0)


Re: I need help to protect my site

Post by the w on Mon Aug 01, 2011 3:48 pm
([msg=60413]see Re: I need help to protect my site[/msg])

the forum is http://web-protect.info/ . The Language of forum is English. I will write your nick in the chat room to prove that the forum is mine. To see the chat you must register.
the w
New User
New User
 
Posts: 4
Joined: Mon Aug 01, 2011 10:52 am
Blog: View Blog (0)


Re: I need help to protect my site

Post by Phantom Wolf on Mon Aug 01, 2011 9:52 pm
([msg=60423]see Re: I need help to protect my site[/msg])

I haven't found anything so far, I'll look some more later if I have the time

EDIT: Forgot to mention, whoever it is telling you you can be hacked might be referring to an exploit for an old version of IPBoard that's been fixed
"Well it isn't my fault. I shouldn't have been allowed to do something to crash it." "No, you shouldn't have been allowed to buy a computer in the first place"
Phantom Wolf
Poster
Poster
 
Posts: 271
Joined: Wed Mar 03, 2010 8:45 pm
Blog: View Blog (0)


Re: I need help to protect my site

Post by tremor77 on Tue Aug 02, 2011 8:11 am
([msg=60434]see Re: I need help to protect my site[/msg])

IPB is a pretty secure environment overall if you have the latest versions AND you are using a LEGALLY obtained, registered copy of the software.

That being said, make sure you have everything up to date and that any customization you've done outside of the original code, along with 3rd party plugins, are properly secure.

If you are running on a shared web hosting account however, you are at the mercy of the flaws of the providers security.

I'm not sure if it's possible with IPB but, consider changing the configuration and location of your Administrative login. I tried to visit your site to see if I could examine it but it was not available... hopefully it is not too late.
Image
User avatar
tremor77
Contributor
Contributor
 
Posts: 860
Joined: Wed Mar 31, 2010 12:00 pm
Location: New York
Blog: View Blog (0)



Return to Web

Who is online

Users browsing this forum: No registered users and 0 guests