>>
Site Map
>>
Forums
>>
PHP-Nuke Security
Forum module - topics in forum:
PHP-Nuke Security - Been hacked? or have a question about securing your site, here's the place.
Hacked with this string
I have phpnuke and the hackers that hacked my site told me they used this string in search module to retrive my password:
p0hh0nsee%') UNION ALL SELECT 1,2,aid,pwd,5,6,7,8,9,10 FROM nuke_authors/*
Is there a way to avoid that this string return the administration passwords?
Thanks.
| Quote: : |
Is there a way to avoid that this string return the administration passwords?
|
Make sure you have protection installed such as Sentinel....
Got a URL?
Looks like people are getting sites from here again, I got the same string but I had Sentinel so it didn't affect me. If you want to ban their IP, its 85.103.183.82 it's an IP from Turkey BTW 
| Dirk Wrote: : |
| Quote: : |
Is there a way to avoid that this string return the administration passwords?
|
Make sure you have protection installed such as Sentinel....
Got a URL? |
I just did a manual patch at the code,
this is the url:
http://gamevolution.it
| Cypher_489 Wrote: : |
Looks like people are getting sites from here again, I got the same string but I had Sentinel so it didn't affect me. If you want to ban their IP, its 85.103.183.82 it's an IP from Turkey BTW  |
Could be use with a thread entirely listing IP's by hackers.
However one hacker here used a robot in Colombia.