Hrvoje

Dec 23 2004, 02:06 AM

i read somwhere today that there is some fast spreading worm attacking phpBB forums. like that he erazes all data and change start page to somethng like... this page is infected with a worm... :roll: it spreads by using the google.. dunno what that meens.. i just had some small info in some news on site in croatian language so i doubt like to it will help u .. and nothing more. any1 know something more???

Reply

Hrvoje

Dec 23 2004, 02:08 AM

great!

i found some info on sophos pages:

http://www.sophos.com/virusinfo/analyses/p...perlsantya.html


take a look... there is a way to fix it

Reply

Latest Entries

norbie

Jan 13 2005, 09:12 PM

if anyone's interested...

add this to your .htaccess file in your root folder (where the php app is installed e.g. phpbb, phpnuke etc)

CODE

#TEMP BANS FOR SANTY WORM:

RewriteEngine on

#CHECK FOR KNOWN USED USER_AGENTS:

RewriteCond %{HTTP_USER_AGENT} ^LWP::Simple       [NC,OR]

RewriteCond %{HTTP_USER_AGENT} ^lwp-trivial       [NC,OR]

RewriteCond %{HTTP_USER_AGENT} ^libwww-perl       [NC,OR]

#CHECK FOR KNOWN ORIGINATORS IN URL:

RewriteCond %{REQUEST_URI} visualcoders         [NC,OR]

RewriteCond %{REQUEST_URI} midomain.false.ca  [NC,OR]

RewriteCond %{REQUEST_URI} envidiosos.org      [NC,OR]

RewriteCond %{REQUEST_URI} filepack.superbr.org [NC,OR]

#CHECK FOR COMMON STRINGS IN QUERY :

RewriteCond %{QUERY_STRING} highlight=%2527    [NC,OR]

RewriteCond %{QUERY_STRING} rush=([^&]+)        [NC]

#IF MATCHED, SEND VISITOR TO THEIR OWN LOOPBACK ADDRESS:

RewriteRule ^.*$ http://127.0.0.1 [L]

Filters all Santy attacks by redirecting them to localhost

Reply

.:Latios:.

Jan 13 2005, 09:09 PM

hmm... the worm maker must be a talented hacker, i'd be happy if he could learn me somethin'

Reply

abcde

Jan 10 2005, 03:55 PM

QUOTE

How do you protect your forum from worms & virus`s?

Update to the newest version of phpBB (currently at writing this it's 2.0.11).
Update the php (only the admin can!) to at least 4.3.10.
A good configuration of the serversoftware.

Reply

norbie

Jan 9 2005, 08:26 AM

if its running on php, i can show a nice way to filter out all santy worm attacks

Reply

djbungle

Jan 9 2005, 04:44 AM

How do you protect your forum from worms & virus`s?

Reply

Got an Opinion! Express your Views! (no registration):-
Add your Reply/ Opinion/ Views/ Comments/ Suggestion/ Questions/ Queries etc.
Posts with decent grammar & English will be accepted and please refrain from profanities.
For asking a Question, We recommend you to sign-up (for free) so that you can track the topic easily.

Nature of your Post*:		Opinion/ Reply/ Comments Question/Query Feedback to us.
Name			Email
Title/Question*
(Maximum characters: 10,000) You have characters left.
Confirm Code:

1. Can Somebody Install Mods For Phpbb For Me? - (3)
2. Phpbb Or Ipb? - Which shall I pick? (30)

   Ok, I need help with this, I tried to use mods to detetmine it, but there still pretty even, IPB
   wins there, but newer versions of PHPBB will remain free, and mods will stop soon for IPB 1.3...
   What should I choose? Please reply telling me why you chose what you chose......

3. Phpbb Question - (7)

   I just uploaded the fully modded phpbb to my account. It works grat but I don't know how to
   install the themes to it. Can someone help me on this? msn: lxlabstractlxl@hotmail.com aim:
   lxlabstractlxl...

4. Advertise - trap17 @ phpBB.com (1)

   I've enjoyed my stay here so far very much, that I've decided to advertise your site at
   phpbb.com to help you guys get more members. Here's one of the links to a post I made not long
   ago: http://www.phpbb.com/phpBB/viewtopic.php?p...hlight=#1581343 ...

5. Need Weapon, Armor, Upgrade, Etc... Ideas - for a KoC mod for phpBB... (19)

   Ok, well I am developing a Kings of Chaos modification for phpBB. I need help designing the actual
   finer details like weapons, armor, spy tools, sentry tools, upgrades, races, etc... Here is what I
   have thought of, recomend if an item should be ranked more powerful (currently weakest to strongest
   in each category) Attack -Stick -Stone -Dagger -Short Bow -Crossbow -Longbow -Steel Bow -Steed
   -Two-Handed Sword -Flaming Arrow -Cannon On Wheels -Blackpowder Missile Defense -Leather Helmet
   -Leather Tunic -Wooden Sheild -Steel Helmet -Steel Shield -Chainmail -Plate ...

6. Support for phpBB (please read!!!) - (2)

   I have seen some support topics for phpBB. They are not bad but sometimes unclear. So I thought, I
   make a topic for how to get support. You gotta paste this in your support topic: CODE
   [b]Homepage URL:[/b] URL to homepage [b]Problem page
   URL:[/b] URL to page with problem [b]phpBB Version:[/b] Version of
   phpBB [b]Is it stand alone:[/b] Is it stand-alone or intergrated in script like
   php-nuke? [b]Templates installed:[/b] Templates installed next to subSilver ...

7. Phpbb 2.0.13 now availble - (1)

   Download it @ www.phpbb.com...

8. Update to PHPBB 2.0.13 - (8)

   I understand that this is a heavily modded forum but wouldn't it be better if u update the version
   to PHPBB2.0.13 or u just wait so some mods will be out for 2.0.13. I updated my forum with my friend
   yesterday and except of the security fixes which we can't c i think it's a bit faster....

9. phpBB 3 - (11)

   am i the only who can't waitfor that hting. I really want to see the new ACP and warning system. I
   would like to know if FNH will supply the auto update for PHPBB3 which phpBB group said they gonna
   realase. I have np doing it manually but the cpanel installer is easy and quick. Which is good for
   my slow connection....

10. phpBB v.s php-Nuke - (3)

    I would like to know what one you think is the best one. phpBB v.s php-Nuke
    ---------------------------------- phpBB Is phpBB better then phpNuke? Is phpBB more
    complex then php-Nuke? Does phpBB have better admin features then php-Nuke? Does phpBB have better
    quality themes then php-Nuke? What are the downside of phpBB compared to php-Nuke? Does phpBB have
    better security features then php-Nuke? Does phpBB have a better support interface then php-Nuke?
    php-Nuke Is php-Nuke better then phpBB? Is php-Nuke more complex then phpBB? ...

11. moving phpBB forum from one server to another - (19)

    I have a free hosted site and now I ALSO have a paid site. Both at freenukehosting and actually the
    same server/IP address. But different accounts. I use the free site as a testing site. At the
    moment, I'm testing a phpBB forum. I feel satisfied with the forum and would like to copy the forum
    and upload it to the new paid hosted site. I tried to download the whole directory with all the
    phpBB-files for the forum and then uploaded it to the new site via FTP. How do I move the mySQL
    databases from the test site, to the new paid site? Is it possible to restore ...

12. phpBB themes! - (11)

    Hey i just noticed that subsilver is not working. I mean u have replaced files with SubIce files.
    Why that, i dun like that theme i think subsilver was better. And why dun u install some themes like
    Morpheus and MorpheusX with extreme styles mods. They are just so much better than this 1....

13. having trouble setting up cookies (phpbb) - (3)

    For some reason when some1 visits my forum it wont save your PW.... I don't know how to set the
    cookies.. any help would be apreciated :-)...

14. phpBB VS InvisionBoard - (30)

    is better phpBB or InvisionBoard? what are the difference?...

15. Problem with my phpBB forum, HELP!! "page cant be displ - (5)

    Please someone help me here. When i login into my forum i get a "Page Cannot be Displayed" Message!!
    why?? it was working fine, i don't know if maybe i did something wrong when i was "playing" with the
    phpnuke and changed something. Can someone help me please !!...

16. phpBB RPG style - (13)

    I need some "medieval" skin for my forum (i already have chronicle) the pics doesn't have to be
    "medieval" i can arrange that, i just want that the skins has some nice medieval color, like dark
    brown... something medieval what :roll: Exemple: Nice brown skin anyone has saw a template
    with those colors? Thanks /wink.gif' border='0' style='vertical-align:middle' alt='wink.gif' /> ...

17. phpBB - (0)

    hmmm....another problem.....45 minutes after my last two posts...not good... Why when I install
    phpBB it keeps coming up saying a problem has occurred then when I look at the page its supposed to
    be at it says page cannot be found. I did everything it asked, admin username, admin pass, and even
    put it at a valid address by just adding phpBB at the end of the address! IDK what its doing anyone
    help??...

18. phpBB - (7)

    phpBB definitely....

19. Usefull phpBB sites and info. [IMPORTANT UPDATE: 02-28-05] - (9)

    In this topic I will give some usefull sites and info. I start with info because that is most
    important: Info : phpBB is under a GPL license. It is 100% free and it may be reselled (thanks
    abcde for the notification). You may also adjust it like whatever you want. There are no problems
    with installing mods. If you want to make a pre-hacked phpBB (phpBB with mods installed) and
    publish it you must ask permission to all authors of the mods you are using. And ofcourse the
    most important one: DO NOT REMOVE THE COPYRIGHT . If you do you will not get support...

20. Language phpBB - (2)

    Hello, Where can I download dutch langauge pack for phpBB (cobalt theme)?...

21. PhpBB 2.0.1.2 Released! - (12)

    Here it is the link: http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=265423 Please update
    when you get the chance. QUOTE phpBB Group are pleased to announce the release of phpBB
    2.0.12 the \"Horray for Furrywood\" release. This release addresses a number of bugs and a couple of
    potential exploits. It also adds a new feature in the form of an ACP based version checker
    (maintainers of language packages please take note of the need for the additional localised
    string!). Please note, the exploits of which we've been notified and which are addressed in 2.0....

22. Transfer phpBB from localhost to my website problem.. - (0)

    I just like to know maybe some of you phpBB veterns may experience this to teach me. What I do is
    use wampserver which is a software that complies all the apache, php, mysql into one installation. I
    use that software in my computer to work with integramod testing. I add some mods to integramod.
    Then I transfer it to my website. That is where I encounter the problems. I know that it is not even
    the a database table error. Because I try this many times. And I know that i can not be a script
    error too. For example: I will add one mod like ADR. Then transfer the edi...

23. Invision board VS phpbb - (84)

    which one do you like better? feel free to post your comments here! * I like IBP better,
    because it's easy to manage and other than that, it's has more modifications than Phpbb. I am using
    a 2.0.0 now, and i really like it! /smile.gif' border='0' style='vertical-align:middle'
    alt='smile.gif' /> ...

24. How to install phpBB - (16)

    Hello!!! I want to learn to install an phpBB forum for mi Fundation "El Medio Y El Fin" Can
    any want to help me?...

25. Phpbb mod help - (2)

    I'm looking for a specific function that could make my job easier on my forum. I would like that
    when a member post a message in one forum, let say "group psp member" , from that moment he will be
    a member of the psp forum part and can post on that forum part. Posting to be a member from another
    group at another forum. In short: Post at one place to be a member from a certain group and see
    that part of the forum that belongs to the group. Is there a mod that can do this ? Thanks
    Marc...

26. phpBB 2.0.11 released (critical update) - (3)

    Everyone using phpBB 2.0.9 or lower should upgrade to 2.0.11 but is not critical and very
    important. But everyone using phpBB 2.0.10 must do. QUOTE We have now released phpBB
    2.0.11, the \"damn, it's cold and my fur won't grow back\" edition. This fixes a number of issues,
    introduces visual confirmation as standard and addresses a potentially serious exploit. We encourage
    everyone to update as soon as possible. We also encourage any hosting providers out there to contact
    and/or update users copies of phpBB to this latest version. Please spread news of this rele...

27. Intergrating users' data table for phpnuke and phpBB???? - (2)

    Just wondering... I am trying to make this happen. I am trying to intergrate user's data table
    from both phpBB and php-nuke. I want to do this so that users can just log in once and can go to
    the forum board without having to log in again. This must be possible, right? Can anyone help
    me on this?...

28. PHPBB Problem - (4)

    PHPBB On my site doesn't work! Help me...

29. PhpBB Style Help?? - (5)

    How do I create a new style in phpbb? like for the whole page to change?...

30. Can I create subforums with PhpBB? - (13)

    Can I create subforums to forums with PhpBB?? I know with IPB you can do that.......