Change Cookie for Extra Security

Hello All,

I have noticed that many users of the webwiz forums application continually disobey the notice from "-borg-" about renaming and/or moving there database. If your Database is not renamed and/or moved then it leaves a open run for hackers.

To add to the moving and/or renaming of database issue, i recommend that you also change the name of the cookie for the forums as a hacker can use the "User_Code" and store it in the Default cookie (WWF) and gain access to the administration section of your website. I recomend strongly that you choose a name other than WWF!

Hope that helps...

How to do this is mentioned in the documentation that comes with the forum, or can be read online at:-

http://www.webwiz.net/web_wiz_forums/docs_access_move_ db.asp

It is also mentioned in many posts on this forum if you do a search.

Two files will need to be edited (common.asp files) using a text editor.

If you are running the Access version you should at very least follow the install instructions and rename and move the Access database.

Changing the cookie name in the common.asp files will also add protectoin incase a hacker does still somehow get hold of your Access database.

The Access database should be placed in a file that is not accessable through a web browser to prevent it being downloaded by a hacker.


Edited by -boRg-

Only if you think someone might be able to gain access to your database.

But it would take much anyway for someone to work out the new cookie name, either way.