MyBB Community Forums

Unfortunately for me, I was hacked earlier today. R3SPAWN was what he went by, and he did not get far. Though he was able to regain Administrative access twice, we put a stop to it, although the leak is not plugged, so perhaps you all can help me?

Plugins:

Admin CP Honeypot by MyBBWebhost
Gaming ID's by Janota
Javascript Bot Protection by Paul Wiedebusch
reCAPTCHA Plugin by Thomas Hruska, CubicleSoft Core

Hosting:

x10hosting

Stats:

MyBB: 1.6.9
PHP: 5.3.18
SQL Engine: MySQL 5.1.65

Anything else you need to know let me know! I appreciate any help, and advice any of you have that could help resolve my current crisis.

It could be Gaming ID's by Janota

A lot of those plugins that add stuff to the profile and user cp get hacked.

(2013-02-06, 06:17 AM)TaylorCTU Wrote: [ -> ]It could be Gaming ID's by Janota

A lot of those plugins that add stuff to the profile and user cp get hacked.

It's not a widely used plugin, and we have thread lists for the ID's. Not sure why I kept it around, deactivated & deleted that one, was about time to be honest. Still to be on the safe side, interested to hear what others have to say.

Thank you TaylorCTU!

Janota, enough said.

Run a google search for the *thousands* of threads about him. The terms I used was "Janota MyBB"

Janota is rather infamous. Leaves backdoors in his plugins, and when confronted, vehemently refuses to do anything about them.

Wow. So I suppose I can just chalk this up to being him? I'll re-open the forum and keep a close eye on it having now removed his plugin

Alright, thank you so much everyone. I really appreciate it, I suppose next time around I'm seriously going to have to investigate plugins and what not. I was a fool not to in the first place, again thank you everyone!

You can read this:
http://community.mybb.com/thread-132919-...#pid962386

If you want an easy way to get the "Gamer ID" option without a plugin.

Here's a user that did it and posts how it looks like:
http://community.mybb.com/thread-132872-...#pid963160

(2013-02-06, 04:33 PM)weBex Wrote: [ -> ]You can read this:
http://community.mybb.com/thread-132919-...#pid962386

If you want an easy way to get the "Gamer ID" option without a plugin.

Here's a user that did it and posts how it looks like:
http://community.mybb.com/thread-132872-...#pid963160

I'm a noob, so I didn't realize how easy it was to accomplish something like that. Thank you, I will definitely be manually adding this instead of some plugin.