hacked?

[banpei]

oldskull Wrote:ok, I got freebsd here. As I can say lots of attacker try to access/hack my system. But since I disabled some function in php.ini and they could not access into the system. try to find out what kind of exploit they used to access your system and patch them

It used to be on FreeBSD as well, but since FreeBSD doesn't support Sun hardware very well I switched to Gentoo.

I need some settings in the php.ini just because we run phpbb. Phpbb is a program which was written somewhere around the time when cavemen walked the planet and now people are trying to block the entrance of the caves with pebbles. It's just a big open hole. Well actually it isn't that bad, but it is not software which is entirely well written.

I try to keep up with all patches and apply them, but it could also be that this was a new exploit. The hack was clearly done by an automated script and not by someone who was actually aware of our system: otherwise they would have caused much more damage. They altered some things in the database and that's it: tough luck.

I raised the frequency of backups at the moment and I'll dive into it this weekend. During weekdays I'm awefully busy, so I don't have time right now to figure out what they exactly did...