Partner Nintendo 3DS Central Social

GF Attacked

Demon_Skeith

Demon_Skeith

Administrator
Staff member
Administrator
87,151
2007
4,399
Awards
30
Credits
26,667
Steal Penalty
You're Rich Money Bags Award
Profile Music
Yesterday about, around 11:50 PM someone launch an attack on the website through our wiki. This promoted quick response from our host to stop it but ended up putting the site into a account suspend page for about 10 minutes. As far as I know no data was stolen or altered/deleted.


Learning what happened and the source, I checked out the wiki to see it full of spam and my admin account unreachable (both in signing in and trying to recover my password.) so the wiki project I've slowly put some work into is suspended till further notice.
 
Sounds like a security hole from an unpatched version of the Wiki software. Have you been quickly updating the Wiki CMS to the latest version as new versions are released?
 
I haven't updated anything on the wiki for a little while now.


but that aside, I found out from my host that the attack didn't use the software, what the attacker did was this:

It's not a flaw in the software per-say but the way the user was requesting pages.
Click to expand...


My host has made the needed adjustments to their firewall to prevent this from happening again in the future.
 
It is good to hear everything is normal and no data is lost. How is the WiKi progress going?
 
Dude that's pathetic I hate people who have nothing better to do than mess with your site! That's why I try to back up anything I have that's important but to good hackers that will never matter they'll get your info if they want it. Regaurdless of wether you backing up or not! Try making a webmaster account that is hidden so you have an alternative to get on here if they get your main admin account!
 
You must log in or register to reply here.
Back
Top