هذا الموضوع كتب من قبل صاحب المنتدى المقيم في بريطانيا
يقول:
انا نهظت من الفراش لأجد صندوق بريدي الإلكتروني ملئ بالرسائل التي بعثها الأعضاء يقولون فيها بأن منتداي تم اختراقه, وللتأكد, دخلت المنتدى وهناك وجدت رسالة من الجماعة المخترقة والمعرفة بإسم هاكرز الحجاز.
وبعمل تحقيق, يبدوا انهم بطريقة ما وصلوا إلى معلومات الأعضاء وأكملوا ذلك بمسح جميع الاقسام ومشاركات الأعضاء. وغيروا تمبليت الفورم هوم وانهوا ذلك بحذف المشرف.
وبقية الرسالة هى عن كيفيه اعادة المنتدى من جديد.
وما يهمنا الآن هو:
ما رأي الأعضاء الكرام فيما حدث لهذا الشخص بحيث تكون الآراء بلا تسرع وان تكون داخل إطار الجوانب التالية:
1. الجانب الإسلامي.
2. الجانب الأخلاقي.
I've just got out of bed to find a mailbox full of messages from my members saying my forums have been hacked. Sure enough, attempt to login into the forums and there's a message from a hacker group known as "Alhejaz_Hackers".
On further investigation, it looks like they have somehow managed to up their user account to administrator privilege, then proceed to delete all of the forums and their posts, change the "forum_home" template, and then finish by deleting my own admin user account so I couldn't get back in.
I've now created a new account for myself, logged into MySQL in the conventional method on the server, and changed my user privileges back to administrator so I can access the vB control panel once again.
It does not appear that they broke into the FTP or the hosting company's site control panel fortunately. I am now writing to my hosting company (VentresOnline) to see if they can obtain a back-up of the MySQL database from yesterday, but even if I can get the site restored, I get the impression from the hackers message that they are going to keep on doing this to me.
I really do not know which way to proceed next. The system has logged two different IP addresses for this hacker in the admin log. It looks like they have been able to login to the admin area with an account they opened moments before, which considering even registered users have fairly restricted privileges on my forums is very worrying.
Has this ever happened to anyone else? What should I do next for the best? How can I make the site more secure? I am quite stunned that this has happened to my fairly small and insignificant forums site, and gutted that this has happened so soon after we'd just relocated to a decent hosting company. Help!
Last edited by Mark0380 on 04-11-2002 at 10:32 AM
