Networks/Telecom/Security -> mikeroweforums hacked!

Red Squirrel - Feb-11-2004 server time

I just figured it out. The haxor changed all the usernames to mantis, so I was still logged in as red squirrel, but it showed mantis. Seems the passwords were changed too since I can't log in with my original password. So that PM was probably mine. Someone might of robbed me or something. Hopefully mike will be able to settle this once and for all though.

Red Squirrel - Feb-11-2004 server time

Crap now I can't use that url anymore. I noticed that private message, was curious to see what it is. and chances are I had admin access. I could of did a nice deed and fix it all or something. Or redirect to this site. J/K

Red Squirrel - Feb-11-2004 server time

This is quite strange.... The url http://www.mikeroweforums.com/forums/index.php? s=089826193f6b036dc6900024416cb2ab was posted in the shoutbox by thomas, and it logged me in as mantis because of the session ID. But I clicked logged out and it logged me out as guest. I wonder where that url comes from? Edit: this board cuts off all the url so I had to put a space... must be a security feature.... speaking of security.

Red Squirrel - Feb-11-2004 server time

Gee I think he may be lacking in security or something. He got Pwned again! http://www.mikeroweforums.com/forums/index.php

Red Squirrel - Feb-10-2004 server time

His forum died down big time lately. It's taking him too long to do something about it and lot of people are getting mad. They got hacked more then once now.... I can't believe he did not backup anything though. It's my nature to backup everything when I make a site. Actually, I don't back it up, I simply already have it on my hard drive. Have to upload it from somewhere... For databases, I back those up often, and in his situation, I'd do it twice a day. I'd write a robot that would automaticly do it. It's plain text, so it would be easy to do.

Red Squirrel - Feb-06-2004 server time

It seems they got hacked pretty bad. Lot of posts are missing, and there's lot of sql errors. My account is actually gone as well! I hope he has a backup!