Web Wiz - Green Windows Web Hosting

  New Posts New Posts RSS Feed - Any known issues?
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

Any known issues?

 Post Reply Post Reply
Author
ClimbersEdge View Drop Down
Newbie
Newbie


Joined: 12 March 2003
Location: United States
Status: Offline
Points: 4
Post Options Post Options   Thanks (0) Thanks(0)   Quote ClimbersEdge Quote  Post ReplyReply Direct Link To This Post Topic: Any known issues?
    Posted: 13 March 2003 at 8:37am
 I would like to know if there are any known security issues with Web Wiz Forums.  It may be shear coincidence, but as soon as I loaded the software on my server, I had nearly 700 attempts to access my system that were blocked by my firewall.  Unfortunetly, I have discovered that the firewall was apparently breached and I have files that have been removed from my system.  One of those files is the Web Wiz Forums database!  Infact, that is how I discovered the system was breached... I went to work on my web forums setup and was unable to open the page because the database is completely gone!  Upon further checking, I discovered many personal MP3 files had also been removed from my server.  So any insights that people may have regarding security issues with this software would be great... and like I said it may have been shear coincidence.
Back to Top
WebWiz-Bruce View Drop Down
Admin Group
Admin Group
Avatar
Web Wiz Developer

Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
Post Options Post Options   Thanks (0) Thanks(0)   Quote WebWiz-Bruce Quote  Post ReplyReply Direct Link To This Post Posted: 13 March 2003 at 8:50am

In documentation in details how to make the database secure.

Also it shouds like you need some basic server security protection, make sure the IUSR account has read only permissions on all directories that can be reached by a web browser or a hacker will be able to use tools available on the net to delete, upload, etc. files within your site.

Back to Top
ClimbersEdge View Drop Down
Newbie
Newbie


Joined: 12 March 2003
Location: United States
Status: Offline
Points: 4
Post Options Post Options   Thanks (0) Thanks(0)   Quote ClimbersEdge Quote  Post ReplyReply Direct Link To This Post Posted: 13 March 2003 at 1:39pm

I had the permissions set as per your docs.  I also have a netgear hardware firewall in line.  So I am a little surprised that the system was accessed.  I use a dynamic DNS server, so the hacker was able to track the system down even though I kept changing IP addresses... that is why I was wondering if the forum software has something that would help a person track the system with changing IP addresses... unless they were specifically going after a URL that is not published yet (to speak of)

Back to Top
faubo View Drop Down
Senior Member
Senior Member
Avatar

Joined: 30 May 2002
Location: Brazil
Status: Offline
Points: 560
Post Options Post Options   Thanks (0) Thanks(0)   Quote faubo Quote  Post ReplyReply Direct Link To This Post Posted: 13 March 2003 at 5:06pm

Nope,

WWF is as secure as one DB in the web can be (if you follow the security tips)

It's almost certain a problem with the server, someone hack it, or someone know your login and pass.

Back to Top
 Post Reply Post Reply

Forum Jump Forum Permissions View Drop Down

Forum Software by Web Wiz Forums® version 12.08
Copyright ©2001-2026 Web Wiz Ltd.


Become a Fan on Facebook Follow us on X Connect with us on LinkedIn Web Wiz Blogs
About Web Wiz | Contact Web Wiz | Terms & Conditions | Cookies | Privacy Notice

Web Wiz is the trading name of Web Wiz Ltd. Company registration No. 05977755. Registered in England and Wales.
Registered office: Web Wiz Ltd, Unit 18, The Glenmore Centre, Fancy Road, Poole, Dorset, BH12 4FB, UK.

Prices exclude VAT at 20% unless otherwise stated. VAT No. GB988999105 - $, € prices shown as a guideline only.

Copyright ©2001-2026 Web Wiz Ltd. All rights reserved.