Lavalair Scripting Tools!

[Guest]

yesterday my site has been hacked by some one. my site is a wap forum. that hacker baned me first and then he baned all in my site. as i think he has attakd by a hacking tool. coz he havent touch data base. could any wap master tel me how to protect my site? wat r the best anti hack tools to prevent hakin?

[GumSlone]

yesterday my site ( http://arawap.net ) has been hacked by some one. my site is a wap forum. that hacker baned me first and then he baned all in my site. as i think he has attakd by a hacking tool. coz he havent touch data base. could any wap master tel me how to protect my site? wat r the best anti hack tools to prevent hakin? [/b]

Which forum script you used on your site?

[Guest]

Which forum script you used on your site?[/b]

i used RW lavalier wap forum
with huge modifcationz

[subzero]

goto ya file_manger

edit all files as i show you....

1. modproc.php
2. modcp.php


1.

<?php
include("config.php");
include("core.php");
connectdb();
$action = $_GET["action"];
$sid = $_GET["sid"];
if(!ismod(getuid_sid($sid)))
  {
    echo "<card id=\"main\" title=\"arawap.net \">";
      echo "<p align=\"center\">";
      echo "You are not a mod
Subzero is here to protect me!!!!!! ";
      echo "
";
      echo "<a href=\"index.php\">Home</a>";
      echo "</p>";
      echo "</card>";
      echo "</wml>";
      exit();
    }

2.

<?php
include("config.php");
include("core.php");
connectdb();
$action = $_GET["action"];
$sid = $_GET["sid"];
if(!ismod(getuid_sid($sid)))
  {
    echo "<card id=\"main\" title=\"arawap.net \">";
      echo "<p align=\"center\">";
      echo "You are not a mod
subzero is here to protect me!! ";
      echo "
";
      echo "<a href=\"index.php\">Home</a>";
      echo "</p>";
      echo "</card>";
      echo "</wml>";
      exit();
    }

when you make a file that is open make sure you use

exit(); that not welcome

[GumSlone]

Lets wait few days if there would be more posts about hacking of this script than there are realy black holes in it which need to be closed.

[subzero]

gumslone i fixed the hacking problem ppl try it at my site all the time

if ya like to get who doing this place this code and make text file name iplog.txt

<?php
include("config.php");
include("core.php");
connectdb();
$action = $_GET["action"];
$sid = $_GET["sid"];
if(!ismod(getuid_sid($sid)))
  {
    echo "<card id=\"main\" title=\"arawap.net \">";
      echo "<p align=\"center\">";
$fp=fopen("iplog.txt","a+"); 
fputs($fp,"|=|$HTTP_USER_AGENT|$REMOTE_ADDR|=|\n\n");
fclose($fp);
      echo "You are not a mod
subzero is here to protect me!! ";
      echo "
";
      echo "<a href=\"index.php\">Home</a>";
      echo "</p>";
      echo "</card>";
      echo "</wml>";
      exit();
    }

and chmoned 0777

this will help you pin the user in ya forum to ban him

[Guest]

bro he is using a hackin tool to do it . im sure he hasnt attak my bata base. but he can ban ppl . add and remove plusess. he can do any thing wat moderator does.

[subzero]

do what said your be save!!


no he not using a hacking tool he got this from some one mite be a kid think he smart its a script that lets you past as a mod ok

[Guest]

gumslone i fixed the hacking problem ppl try it at my site all the time

if ya like to get who doing this place this code and make text file name iplog.txt

<?php
include("config.php");
include("core.php");
connectdb();
$action = $_GET["action"];
$sid = $_GET["sid"];
if(!ismod(getuid_sid($sid)))
  {
    echo "<card id=\"main\" title=\"arawap.net \">";
      echo "<p align=\"center\">";
$fp=fopen("iplog.txt","a+"); 
fputs($fp,"|=|$HTTP_USER_AGENT|$REMOTE_ADDR|=|\n\n");
fclose($fp);
      echo "You are not a mod
subzero is here to protect me!! ";
      echo "
";
      echo "<a href=\"index.php\">Home</a>";
      echo "</p>";
      echo "</card>";
      echo "</wml>";
      exit();
    }

and chmoned 0777

this will help you pin the user in ya forum to ban him[/b]

bro where to enter this code? and u meant a blank iplog.txt file to add the server?

[subzero]

pm me bro

[Guest]

and one more thing bro he has banned all my users .. no1 can log to my site . it sys ip is baned. and wen click some links like biddy list. ban list it says ip is baned. wat shud i do ? how to remove it?

[subzero]

just pm me to get more info thanks

[Guest]

Blaze forgot 2 add the

exit();

I did that out when I updated my site from wml to xhtml so the modcp.php got bugs denverporia19 lammed my site owner of crypticworld I dont call them hackers just wannabe hackers lammers just use the codes on ur site and cant really hack.

[Guest]

lolz thats why i try to use the modproc and modcp if its working coz also someone hacked my site then i rushly go to subzero for this **** matter....

[Guest]

bro where to enter this code? in admincp and in adminproc. and whats about iplog.txt file ?