MyBB Community Forums

Full Version: My site hacked !
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
My site was attacked by Ahli Syurga Crew

http://www.searchr.us/web-search.phtml?s...yurga+Crew

They said in the defacing page :

"Your SITE has VULNERABLE / POSSIBILITIES to be enter by UNKNOWN entities. FIX it up."

I'm using the latest version of MyBB.

What's the problem ?? HuhHuh
There are no known vulnerabilities in 1.6.1, this could have been caused by plugins, or something else on your server.

Do the usual, change password, run the file verification tool to make sure no files have been edited, check for new files/users that look suspicious etc.
Here are the plugins that i use !

Akismet (1.2.1)
Akismet is a program that helps prevent SPAM on your forum.
Created by MyBB Group Deactivate Uninstall
Contact form (0.1)
Provides a simple contact form for your forum
Created by spyka Webmaster Deactivate Uninstall
Donation Page (2.1)
Sets up a page where your users can donate to your PayPal account.
Created by MyBBWebHost Deactivate
Fapcor (forum access post count requirement) (1.3)
A minimum post count requirement to access a forums.
Created by Jesse LaBrocca Deactivate
Forum Icons (2.1)
Adds icons to forums on index.
Created by Jesse Labrocca Deactivate
Fit on Page (2.2)
[Configure Settings]
Resizes embeded images in posts to fit the page and not run over.
Created by - G33K - Deactivate
Google SEO (1.1.13)
Google Search Engine Optimization as described in the official Google's SEO starter guide. Please see the documentation for details.

* Your host does not seem to support mbstring. This may cause problems with UTF-8.
* 404, Meta, Redirect, Sitemap and URL are enabled.


Created by Andreas Klauer Deactivate Uninstall
Group Post CSS (2.0)
Allows you to set the CSS for a groups post.
Created by Jammerx2 Activate
Hello World! (1.0)
A sample plugin that prints hello world and prepends the content of each post to 'Hello world!'
Created by MyBB Group Activate
Hide Links to Guests (1.0)
Show a message to guests instead of links.
Created by DragonFever Activate
Hide Tags BBCode [xtrsyz] (1.4.9)
Hides content specified in the [hide] tag.
Created by xtrsyz Deactivate
My Ad Manager (1.1.5)
The Ultimate Mybb Ad Management System
Created by Jesse Labrocca Deactivate
My Awards (1.3)
Give awards icons to members.
Created by Jesse Labrocca Deactivate
My Meta Tags (2.1a)
This adds meta tags to your forums and threads dynamically.
Created by Jesse Labrocca Deactivate
My Side Boxes (1.3)
Creates SideBoxes for mybb.
Created by Jesse Labrocca Activate
()
Hide object inside the spoiler tag.
Created by Rio Astamal Deactivate
MyIPN (2.2)
MyIPN Paypal Subscription
Created by Jesse Labrocca Install & Activate
My Specs (1.0)
Popup for System Specs in Postbit
Created by Jesse Labrocca Activate
MySupport (0.4)
Add features to your forum to help with giving support. Allows you to mark a thread as solved or technical, assign threads to users, give threads priorities, mark a post as the best answer in a thread, and more to help you run a support forum.
Created by MattRogowski Install & Activate
Name BBCode (1.0.2)
Show the name of the person who viewing the tag
Created by Tikitiki Deactivate
Online 24 (2.2)
Displays the stats on index for users online in past 24 hours.
Created by Jesse Labrocca Activate
Profile Comments (0.5.1)
Give your users the ability to leave comments on members profiles.
Created by Santiago Dimattia Activate Uninstall
Profile Groups (1.0)
Complete list of a users groups in profile.
Created by labrocca Deactivate
Snow Fall On Board (1.0)
Have a nice snow fall on your board.
Created by GodFather Activate
Side Boxes! (2.1)
Additional boxes on the right side of your pages.
Created by Zaher1988 Deactivate
Tabbed Menu (1.1)
Adds tabbed menu to your index page.
Created by Jesse Labrocca Activate
Tagpad (2.1)
This will place a cool little tagpad on the site.
Created by Jesse Labrocca Deactivate
Thank You/Like System (1.1)
Adds option for users to Thank the user for the post or 'Like' the post.
Created by - G33K - Activate
Thread Notes (1.0)
Shows the moderator thread notes on the showthread page to staff only.
Created by Jesse Labrocca Activate
Topic Header (1.0)
Displays latest topics in header
Created by Jesse Labrocca Activate
Username History w/ Time Restriction (2.0)
My FILEs:

inc/languages/english/index.lang.php Changed
inc/functions.php Changed
global.php

I changed functions for Google SEO and lang i don't know how it was edited.

I edited Global.css very often..So anything suspicious ?
Why not contact your hosting service and show them what happened?
It's not Forum MyBB related.
I think it's your host problem, as Matt said there is no known problem at MyBB..
Ask your host to track the logs

What is your site? Apa nama situsnya?
What's your site URL ?