[Discussion] Downtime and Server Compromise

idiotnesia · Post by **idiotnesia** » Mon Feb 02, 2009 6:28 am

Really sad to hear about this problem.

Hopefully everything will be back again ....

Gofer01 · Post by **Gofer01** » Mon Feb 02, 2009 6:33 am

What kind of database does phpBB forum software uses

Shamisen · Post by **Shamisen** » Mon Feb 02, 2009 6:36 am

So I have it straight in my own mind...
Someone got into the Database and saw not only our logins and passwords, but also knows our Email addresses, If we signed up for further correspondence from PhPBB?
This issue only applies to the PhPBB site, not our individual forums.. and we have no issues with the software we are currently running our boards on, IF we've kept it updated?

Is my understanding of this correct?

Thanks..

Keith W · Post by **Keith W** » Mon Feb 02, 2009 6:46 am

As has been said there is nothing wrong with the phpbb software that you use for your individual forums

globetrotting · Post by **globetrotting** » Mon Feb 02, 2009 7:00 am

I'm sorry for you guys, for all the work that has been maliciously put upon you, which also slows down valuable projects of thousands of other people.

That's a lot of bad Karma for the originator - I wonder how anybody could like to be responsible for such an unholy mess?
Keep up the good work which empowers so many people to communicate and to help each other!

jdsingle · Post by **jdsingle** » Mon Feb 02, 2009 7:02 am

I'm sure someone has already pm'd you guys this link. This is the guy who is taking credit for the hack. Not sure if it is legit though.

*Thanks, but we are aware of it*

onehundredandtwo · Post by **onehundredandtwo** » Mon Feb 02, 2009 7:10 am

Shamisen wrote:Someone got into the Database and saw not only our logins and passwords, but also knows our Email addresses, If we signed up for further correspondence from PhPBB?

Not the passwords. Passwords are encrypted by one of the phpBB files and the hacker would have to know the hash key to get in. The hash key is in one of the phpBB files (includes/functions.php I think, not exactly sure) but I'm guessing the hacker only took control over either the filesystem or the database.

Mudjosh · Post by **Mudjosh** » Mon Feb 02, 2009 8:16 am

That is crap! I cannot believe that at all.. Wow.. Guys, man.. If I had any money at all, I would donate it to you guys just to make this halfway worthwhile..

You guys work way to hard to be treated like this!

I'm so sorry!!!!

Chrizathens · Post by **Chrizathens** » Mon Feb 02, 2009 8:40 am

If, by any chance, my host uses phplist in order to have a mailing list, then it appears that I potentially have a problem...
I cannot be sure though, cause I've never used mailing lists...
Anyways, this is really a shame...

I hope you guys get the site back online soon...

Keith W · Post by **Keith W** » Mon Feb 02, 2009 8:53 am

Guys the thing is not to get all in a state over this, your individual forums will be OK, there is no known problem with the current phpBB software.

If you are concerned then change your passwords etc.

Also please try not bother the phpBB staff team with question then have already been covered in this thread, as you can imagine they have a lot of work on there hands right now.

Remember don't get in a state and don't panic as this is what the attacker wants, don't let him/her win

Lets all stand united and give the phpBB team our full support

Development Discussion Board

[Discussion] Downtime and Server Compromise

Re: [Discussion] Downtime and Server Compromise

Re: [Discussion] Downtime and Server Compromise

Re: [Discussion] Downtime and Server Compromise

Re: [Discussion] Downtime and Server Compromise

Re: [Discussion] Downtime and Server Compromise

Re: [Discussion] Downtime and Server Compromise

Re: [Discussion] Downtime and Server Compromise

Re: [Discussion] Downtime and Server Compromise

Re: [Discussion] Downtime and Server Compromise

Re: [Discussion] Downtime and Server Compromise