Hacker xMx4xLxax1xKx4xtx_xMx1xmxpx1x from xAxsxixax
-
-
- alejandra otero
- Rocketeer
- Posts: 91
- Thanks: 0
-
Hello,
I've been victim recently and repeatitly (3 or 4 times a week) from an hacker or hackers going by the name of xMx4xLxax1xKx4xtx_xMx1xmxpx1x, they constrantly reset my password and though they havent done much damage yet, it starts to get annoying!
From what I read on forums they are from Indodesia or Egypt and target among other things Rockettheme templates. I've tried to put all the security possible on my site, as I've hidden Joomla in the source, also have JSecure authentication and .htaccess on the admin root allowing only my IP address to have access to admin panel... How do they do it?
Is there anything else I can do? Is there some security issues with RT templates? Have you had other complaints? Could you get back to those hackers (wankers) and give them a bit of their own medicine? I love RT and Joomla and if I had the knowledge to do so, I would track them down...
I think its worth to have a dig into this issue :shock: - Last Edit: 14 years 8 months ago by Joe Halleck. Reason: Edit Hacker Name
-
-
-
- Rich Bean
- Elite Rocketeer
- Posts: 1194
- Thanks: 1
-
There's a free plug in from Open Source Excellence (I think) that disables that function. I'll see if I can't dig it up...
Edit:
Found It...
www.opensource-excellence.com/index.php?...patch&catid=1:static
I think you need to sign up for a free account to download.
Cheers,
Rich - Last Edit: 14 years 8 months ago by Rich Bean.
- My Sites:
Perth Website Design
Scuba Marketing
I'm a Henning Stalker!
-
-
-
- JEM
- Preeminent Rocketeer
- Posts: 17917
- Thanks: 4
-
www.rockettheme.com/forum/index.php?f=18...ssion&rb_v=viewtopic
Follow the link in the post for security.
Let your host know what is happening (or consider changing hosts)
Make sure you are running all the latest versions of Joomla, the template, and all your 3rd party components. - Thanks,
jim
-
-
-
- alejandra otero
- Rocketeer
- Posts: 91
- Thanks: 0
-
Hi guys, thank you for your advices, problem is I cant find the patch to disable the function reset password from
Open Source Excellence
...
I don't think they had access on my host server, since they would have done much more damage, like changing my index.php or worst! Neither they have access to mySQL, again they would have done much worse...
I'd like to disable the password reset function though, I think that would solve the problem for a while a least...
-
-
-
- Joe Halleck
- Preeminent Rocketeer
- Posts: 5481
- Thanks: 68
- Never give up!
- Edited hacker name so not to give them any more "credit".
- Magento - phpBB3 - Kunena - RokBridge Specialist
No Secure Tab posts unless requested.
Use the Thank You and Life Preserver Buttons!
Your signature is also great place for setup details...help us help you!
-
Time to create page: 0.070 seconds