hacked?

[oldskull]

ok, I got freebsd here. As I can say lots of attacker try to access/hack my system. But since I disabled some function in php.ini and they could not access into the system. try to find out what kind of exploit they used to access your system and patch them

[banpei]

oldskull Wrote:ok, I got freebsd here. As I can say lots of attacker try to access/hack my system. But since I disabled some function in php.ini and they could not access into the system. try to find out what kind of exploit they used to access your system and patch them

It used to be on FreeBSD as well, but since FreeBSD doesn't support Sun hardware very well I switched to Gentoo.

I need some settings in the php.ini just because we run phpbb. Phpbb is a program which was written somewhere around the time when cavemen walked the planet and now people are trying to block the entrance of the caves with pebbles. It's just a big open hole. Well actually it isn't that bad, but it is not software which is entirely well written.

I try to keep up with all patches and apply them, but it could also be that this was a new exploit. The hack was clearly done by an automated script and not by someone who was actually aware of our system: otherwise they would have caused much more damage. They altered some things in the database and that's it: tough luck.

I raised the frequency of backups at the moment and I'll dive into it this weekend. During weekdays I'm awefully busy, so I don't have time right now to figure out what they exactly did...

[oldskull]

I hope you find out where those hackers hack your server. Also dont forget to check those backdoor maybe installed in your system. If I talk to friend of mine in Malaysia, I will ask him what is the latest 0day exploit for phpbb and also gentoo maybe. Dont tell anyone, I am use to be those bad boy when I live in Malaysia. So I did know some of old kind of backdoor. Anyway I already clean myself years ago and try to be cars nerd now

[banpei]

LOL! Well, I try to be both.