Snitz Forums 2000
Snitz Forums 2000
Home | Profile | Register | Active Topics | Members | Search | FAQ
Username:
 Password:
Save Password
Forgot your Password?

 All Forums
 Help Groups for Snitz Forums 2000 Users
 Help: General / Classic ASP versions(v3.4.XX)
 Help - people gaining access without authorization		  New Topic  Topic Locked
 Printer Friendly
Author Previous Topic Topic Next Topic  

mdntblu
New Member

58 Posts
Posted - 09 May 2002 :  12:53:46  Show Profile
Can someone help us?

The forum at http://www.x3church.com/forum/default.asp has been hacked 2 times in the past 2 days. People are gaining admin rights and changing everything around.

Also I've noticed that lately the Admin Options link is always visible to anyone. Shouldn't this only be visible to people who have admin rights only?

Is there anything I can do to prevent this from happening again?

Thanks
Brad

Roland
Advanced Member

Netherlands
9335 Posts
Posted - 09 May 2002 :  13:07:15  Show Profile
Go to the second post in this topic and apply the fixes suggested there: http://forum.snitz.com/forum/topic.asp?TOPIC_ID=27562



http://www.frutzle.com

Snitz Exchange | Do's and Dont's
Go to Top of Page

mdntblu
New Member

58 Posts
Posted - 09 May 2002 :  13:29:44  Show Profile
I applied the members.asp fixes but even if I'm not logged in there is still Admin Options link on every page. This used to not be like this.

http://www.x3church.com/forum
Go to Top of Page

HuwR
Forum Admin

United Kingdom
20595 Posts
Posted - 09 May 2002 :  13:32:28  Show Profile  Visit HuwR's Homepage
once you have done the fixes, change your admin passwords, and check there are no users in the database that have admin rights who shouldn't. (the M_LEVEL) field in forum members
Go to Top of Page

RichardKinser
Snitz Forums Admin

USA
16655 Posts
Posted - 09 May 2002 :  13:37:17  Show Profile
The hacker probably turned Secure Admin Mode off in the Feature Configuration page of the Admin options.
Go to Top of Page

mdntblu
New Member

58 Posts
Posted - 09 May 2002 :  17:59:22  Show Profile
The secure admin mode is turned on. It's not that they can get in, it's just it shows up admin options even if no one is logged in. It's weird.

Brad
Go to Top of Page

ruirib
Snitz Forums Admin

Portugal
26364 Posts
Posted - 09 May 2002 :  18:39:13  Show Profile  Send ruirib a Yahoo! Message
Make sure Non-Cookie mode is off in Feature Configuration.

-------------------------------------------------
Installation Guide | Do's and Dont's | MODs
Go to Top of Page
  Previous Topic Topic Next Topic  
 New Topic  Topic Locked
 Printer Friendly
Jump To:
Snitz Forums 2000 © 2000-2021 Snitz™ Communications Go To Top Of Page
This page was generated in 1.48 seconds. Powered By: Snitz Forums 2000 Version 3.4.07