Maybe I was hacked again!!! ghost users ??

Allgemeiner Support zum phpBB 2 Board und phpBB 2 Modifikationen
Forumsregeln
Auch wenn hier der Support für phpBB 2 weiterhin aufrecht erhalten bleibt, weisen wir darauf hin, dass das phpBB 2 nicht mehr offiziell unterstützt und weiterentwickelt wird!
Antworten
mariokaz
Beiträge: 222
Registriert: So 12.Jun, 2005 21:46

Maybe I was hacked again!!! ghost users ??

Beitrag von mariokaz »

Hi Oxpus

Now I have my Plus 1.53a 2.0.21

www.all-reefs.com

Since an hour ago more or less I have in my forum like 60 users connected and a lot of guessts, so I thought that was very strange so I was asking to some of my friends if they are connected in the forum and they said me "not". :eek:

And I want to post something in any of my topics and this message appears:

You cannot make another post so soon after your last; please try again in a short while.

So I can't post nothing in my forum and all that strange things happen in about one hour ago, I didn't touch any of my files today and in the morning and the rest of the day my forum was fine.

What can I do to disconnect all that ghost users ?? ¢¦

Is that a hacking ?? What do you recommend ?

I will disable the Forum for 5 minutes and see if that works, I hope. :(

Please help me!! ¦4
Zuletzt geändert von mariokaz am Mi 11.Okt, 2006 01:06, insgesamt 2-mal geändert.
Benutzeravatar
oxpus
Administrator
Beiträge: 28735
Registriert: Mo 27.Jan, 2003 22:13
Wohnort: Bad Wildungen
Kontaktdaten:

Beitrag von oxpus »

Install the CT5, if you still haven't do it.
And change the account activation to "Admin" to be able to check them out before they can post.
And bann each user, which will spam in your forums.
Install this MOD, too, to let your board find spammers automatically: http://www.oxpus.de/viewtopic.php?p=40515#40515
And this little MOD helps to avoid posts with defined spam-texts: http://www.oxpus.de/viewtopic.php?p=63416#63416
Karsten Ude
-={ Das Mädchen für alles }=-
Kein Support per Messenger, Email oder PN! Unaufgeforderte Nachrichten werden ignoriert!
No support per Messenger, Email or PM. Each unasked message will be ignored!
mariokaz
Beiträge: 222
Registriert: So 12.Jun, 2005 21:46

Beitrag von mariokaz »

Thank you my friend,

Another thing... when I did the changes of almost all my DB of my Plus 1.52 to the Plus 1.53 I didn't did the Update for the new version of the Plus, I did it one hour ago and I have the same problem.

Almost in all the day I had always 60 users online in my forum, but I know all that people, because are my friend and they aren't doing spam, but they aren't connected and right now I have like a 40 users online.

I see that some users can post but me and others users can't post and appears that message that I told you.

Also I see that my host have deactivated the PHP Safe Mod.

Almost all my forum is running well, only I can't post, I see a lot of users connected and in one topic I see the first post in the last place and the last post in the first place, only in that post are happenig that and in some posts the hours aren't correct.

So I see more this problem like a problem with the script, what do you think Oxpus ?, because I didn't see yet any error, missing files or virus (like the last time when I was hacked).

Any other recomendation ?

Thanx a lot.
Zuletzt geändert von mariokaz am Mi 11.Okt, 2006 08:16, insgesamt 1-mal geändert.
Benutzeravatar
oxpus
Administrator
Beiträge: 28735
Registriert: Mo 27.Jan, 2003 22:13
Wohnort: Bad Wildungen
Kontaktdaten:

Beitrag von oxpus »

I can't helps you, because I don't know, what's happen before this massive "loggins".
At first you should empty (not delete!) all tables beginning with "phpbb_session".
Karsten Ude
-={ Das Mädchen für alles }=-
Kein Support per Messenger, Email oder PN! Unaufgeforderte Nachrichten werden ignoriert!
No support per Messenger, Email or PM. Each unasked message will be ignored!
mariokaz
Beiträge: 222
Registriert: So 12.Jun, 2005 21:46

Beitrag von mariokaz »

Ok and If I empty all the tables nothing wrong happen in my forum ? I will not delete all my posts or something like that ?, sorry for the question but I don't know.

Or only empty the sessions table ?
Benutzeravatar
oxpus
Administrator
Beiträge: 28735
Registriert: Mo 27.Jan, 2003 22:13
Wohnort: Bad Wildungen
Kontaktdaten:

Beitrag von oxpus »

Only empty the session Tables, as I still wrote...
Karsten Ude
-={ Das Mädchen für alles }=-
Kein Support per Messenger, Email oder PN! Unaufgeforderte Nachrichten werden ignoriert!
No support per Messenger, Email or PM. Each unasked message will be ignored!
mariokaz
Beiträge: 222
Registriert: So 12.Jun, 2005 21:46

Beitrag von mariokaz »

Ok no problem I will do that right now!

--------------

Thank you my friend I did that and I disconnected all that users that I had in my forum.

Now I will do all the modificatiosn that you told me, only I can't enter to this link:

http://www.oxpus.de/viewtopic.php?p=40515#40515

So I can get the "Zum Thema Spammer" Mod, please can you put it here to install it in my board.

Cheers and good morning for you.
Benutzeravatar
oxpus
Administrator
Beiträge: 28735
Registriert: Mo 27.Jan, 2003 22:13
Wohnort: Bad Wildungen
Kontaktdaten:

Beitrag von oxpus »

Oh sorry, a post in a hidden forum.
Please ask AmigaLink about this.
He had created this little MOD...
Karsten Ude
-={ Das Mädchen für alles }=-
Kein Support per Messenger, Email oder PN! Unaufgeforderte Nachrichten werden ignoriert!
No support per Messenger, Email or PM. Each unasked message will be ignored!
Antworten