Ir4dex ownz you

[Roman]

I think it should be fixed. Thanks for being patient. PHPBB2 has a vulnerability in it (despite my recent upgrade... sheesh) that allowed some manipulation of the site. And uh.... try not to scream obscenities when next it goes down.... it hurts my feelings....

heh

[Takarious]

If it's a real big issue, split your server into two seperate FTP accounts and place the forum on one. Giving the forum full-scale 777 access and letting it make, edit, and delete files as the script deems fit allows any exploits to be abused to the fullest extent of the attackers imagination. This is all just heresay, I have no personal experience with PHPBB2, so I have no idea what kind of attack was performed. Whether it involved taking control of a gaining informatino through a faulty MySQL database and tracking upward, or simply just a flaw in code. All 3rd party forums I use are generally Invision board. And along time ago I'd use Ikonboard for Perl based boards.

[Roman]

We outsource the host, so we don't have total control; the exploit was in a php script under the board's executable directory. It wasn't a mySQL hack or anything... just some faulty code on the BBS side that allowed the user to trace back to the /www/ directory. Not much we could've done; also, I don't like the idea of tossing the board's security to the wind in the hopes that they'll leave the main site alone. I'd prefer them both to be secure