| Author |
 Topic  |
|
HuwR
Forum Admin
United Kingdom
20595 Posts |
 Posted - 23 August 2002 : 07:35:45
|
quote:
Originally posted by Rasco
quote:
Did you change Default Admin Password ?
V3.4 doesn`t have an default Admin name + password
it does if your upgrading from a previous vesrion, otherwise it asks during setup, but if your passwords were discovered by someone prior to the upgrade, then they will still have access to your site. |
 |
|
|
CodeName
Junior Member
296 Posts |
Posted - 23 August 2002 : 09:01:42
|
No no .. I installed Directly 3.4 .. Not on 3.3.x .. Directly I installed 3.4 ..
And My Admin Password was ASCII and arabian words..
So I think 3.4 has New Security BUg.. |
|
|
|
RichardKinser
Snitz Forums Admin
USA
16655 Posts |
Posted - 23 August 2002 : 11:46:04
|
| I have not received anything from you via e-mail. If you already sent it, please send it again. |
|
|
|
CodeName
Junior Member
296 Posts |
Posted - 23 August 2002 : 13:59:47
|
I'm sending right now again.. With Logs and Some Details 
|
|
|
|
CodeName
Junior Member
296 Posts |
Posted - 23 August 2002 : 15:44:55
|
| Richard Kinser , you can check your e-mail |
|
|
|
RichardKinser
Snitz Forums Admin
USA
16655 Posts |
Posted - 23 August 2002 : 15:46:53
|
| I have, and there is nothing there from you. |
|
|
|
CodeName
Junior Member
296 Posts |
Posted - 23 August 2002 : 15:53:32
|
| Sure? Ýs it your e-mail : <removed> ? Ýsnt it ? |
|
|
|
RichardKinser
Snitz Forums Admin
USA
16655 Posts |
Posted - 23 August 2002 : 16:07:21
|
yes, but I have not received anything from you yet.
I sent you a message to: <removed>
please respond to it and let me know if you got it. |
|
|
|
CodeName
Junior Member
296 Posts |
Posted - 23 August 2002 : 16:14:49
|
Ok I wrote "Yes:-)"
I got it :-) |
|
|
|
RichardKinser
Snitz Forums Admin
USA
16655 Posts |
Posted - 23 August 2002 : 16:24:06
|
| ok, I got the e-mails. |
|
|
|
CodeName
Junior Member
296 Posts |
Posted - 23 August 2002 : 16:25:11
|
| Ok |
|
|
|
RichardKinser
Snitz Forums Admin
USA
16655 Posts |
Posted - 23 August 2002 : 16:35:09
|
you said that this was a NEW 3.4 install right?
If so, why am I seeing query strings that would only be from an older version?
v3.4 does not pass the topic_title in the querystring, but I do see that in the logs you sent me.
If this was an older version that was upgraded, was it hacked in the past? |
|
|
|
CodeName
Junior Member
296 Posts |
Posted - 23 August 2002 : 16:51:02
|
Yes NEW 3.4 ,
Because I had 3.1 version before I installed 3.4
But I didnt upgraded the 3.4 , First I deleted 3.1 and after I installed 3.4 at New folder.. But on older Database..
|
|
|
|
RichardKinser
Snitz Forums Admin
USA
16655 Posts |
Posted - 23 August 2002 : 16:52:20
|
| so it was not a brand new v3.4 install. Because the older database existed before you installed v3.4. Someone could have known the passwords from before they were encrypted. |
|
|
|
CodeName
Junior Member
296 Posts |
Posted - 23 August 2002 : 16:56:28
|
| Right.. So What can i do now ? |
|
|
|
Topic |
|
Topic Locked
