MyBB Community Forums

Full Version: My forum Hacked - SQL injection -- How to protect?
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Hey recently Some guy hacked into my forum and asked for rewards by changing the values of points in newpoints plugins .  I caught him because he had like zero posts and all. 

But how to protect this. He said he did SQL injection.

Some pro members please help. My forum growing good, How to secure it?
Which plugins are you using?
What is your board url?
I believe there's hole on your plugins that you are using.
Which version of MyBB?
Which version of NewPoints?
(2015-04-06, 07:16 PM)xyzabc Wrote: [ -> ]Hey recently Some guy hacked into my forum and asked for rewards by changing the values of points in newpoints plugins .  I caught him because he had like zero posts and all. 

But how to protect this. He said he did SQL injection.

Some pro members please help. My forum growing good, How to secure it?
(2015-04-06, 08:50 PM)Destroy666 Wrote: [ -> ]Which plugins are you using?
(2015-04-06, 10:07 PM)Patchy the Pirate Wrote: [ -> ]What is your board url?
(2015-04-08, 08:29 AM)Tritek Wrote: [ -> ]Which version of MyBB?
Which version of NewPoints?

^ This. List ALL the plugins (and their version) you are using to ensure all plugin authors and any MyBB developer can check for security holes in their respective areas. Without any of that information, it will be really difficult to close any existing security holes.

Since you've posted in the MyBB 1.8 section, we're presuming you're using 1.8.x. Could you verify that you are using 1.8.4 for us please or add your forum's URL?