Development Discussion Board

As any new discussion or support should be done on the main forum now it is re-opened - I will close this topic.

Yes

But how did the attacker know you were running phplist software. Im pretty much certain the page did not have "Powered by phplist" at bottom

:roll:

Although their is nothing you can do about 0day exploits.

Hackers have 'bots' that do phishing attempts against domains.

They 'know' the ...

There seems to be confusion about getting the Custom profile fields to work. Part of the confusion is probably because the screen captures in the Knowledge Base article currently at http://phpbbcom.phpbbservice.nl/kb/article/custom-profile-fields-as-an-anti-spammer-tool.html (and analogous page ...

It would surely be easy enough (once it's all back) to have a read-only mirror that was updated nightly somewhere else.

The hacker gained access on (or by) the 14th January - and was not kicked out till the the 1st February.

So all the backups during that period are suspect.

We do take backups ...

Everyone,

Just to say that I used the Custom Field and added a question "Are you human" with a load of stupid answers (Maybe, Not sure and so on) and
of course a No (default) and a Yes.

The spam stopped immediately (from 20 a day to 0) and I had a legitimate user register just now :)

Thanks,

T ...

what you could do is make use of a HTACCESS file for that folder (assuming you are on a linux server and not windows).

This might help.
http://httpd.apache.org/docs/1.3/howto/htaccess.html

Hello One and All,

Is this a genuine site? According to my logs it visits my site regularly.

WakameCrawler/0.01(+http://help.goo.ne.jp/door/crawler.html)

greetings

L

No idea - it is a japanese site - so unless you can read that langiage you would not be able to tell.

It might well be a ...

Sorry if this is the wrong place but I'm pretty desperate!

My site is planning a major upgrade this spring that will incorporate 3. For now we're still on version 2. And I've been locked out of the forum since Monday. This happened once before and all I need to fix it is the "auto_cookies" mod ...