My forum was hacked, well ok they TRIED

i decided id set up a nice script that emails me when someone hits the custom 404 page, so i can fix any errors, it tells me what page they came from to get to it, so it helps debugging....

.. anyway i was greeted with a nice surprise today

Page Not Found ----------------------- We found a page that was missing, the page was: /forum/admin/database/wwForum.mdb The page was referred by:

i found this highly amusing as, excluding the fact i use MSSQL, they thought id leave it in the "default location"

to make it funnier, my sites quite big, i got alot of posts and members, which is why i moved to MSSQL ages ago (i had to find a host that gave it away cheap)

it took me a while to also realise that .... the path is pointing to the old version 7 default location, and ... am running version 8

this would be hacker seems to have a very low IQ, anyway, i set up a nice suprise for next time they try i hope they do

PS: anybody know the default location for version 8? as i cant be bothered downloading it to find out


Edited by Scotty32 - 04 August 2006 at 10:47pm

Probably a database with just one table and one result saying something.

http://www.plinko.net/404/

aks427 wrote: Probably a database with just one table and one result saying something.

close - its a database with one form, that gives them a nice message explaining its the wrong database , pops up on start-up.

ive just noticed "/radio/admin/database/wwForum.mdb"

and its even appeared on another website as
"/forum/database/wwForum.mdb"
this otherwebsite doesnt even use WWF, so somethings goin on

MadDog wrote: Wanna share your 404 page Scott?  :D

my names acctually Matt, but sure:

i have a "custom error" page set up, am not sure how servers normally do it, but mine atleast does "http://www.domain.com/404.asp?404;http://www.domain.com/folder/page.asp"

so if your custom error page looks like that then it'll work:

strEmailBody = "Page Not Found" & vbCrlf & "-----------------------" & vbCrlf & vbCrlf         strEmailBody = strEmailBody & "We found a page that was missing in *your domain*, the page was: " & vbCrlf         strEmailBody = strEmailBody & Mid(Request.QueryString(),5,(Len(Request.QueryString())-3)) & vbCrlf & vbCrlf         strEmailBody = strEmailBody & "The page was referred by: " & vbCrlf         strEmailBody = strEmailBody & Request.ServerVariables("HTTP_REFERER") & vbCrlf         blnSentEmail = SendMail(strEmailBody, "your_name", "your_email", "your_domain", "from_email_address", "MISSING PAGE!", strMailComponent, false)

thats off the WWF site, so uses the WWF Email Function