Site owner (Chase isn't it?).

[ferny]

http://www.eweek.com/article2/0,1759,1744722,00.asp

 

[oriecat]

Hobbes is the site owner?? Oh man, ferny, you are in trooouuublllleeeee.

 

[Alison]

Edit now before you face the wrath of CHASE!!!

 

[Corry]

Edit now before you face the wrath of CHASE!!!

Seconding that motion!!!!!!!

 

[Corry]

But....that link you posted is pretty damn scary, Ferny!

 

[ferny]

Chase it is then. :mrgreen:

Why did I think it was Hobbes?

 

[ferny]

But....that link you posted is pretty damn scary, Ferny!

Nah, not really. Unless you've got an outdate version of php running and you're using phpbb. Erm, not many sites then... :mrgreen:

 

[Chase]

Thanks for the link, hopefully our course of action has been on the right track

 

[oriecat]

I think there's a custom title for ferny in here somewhere

 

[Corry]

Chase it is then. :mrgreen:

Why did I think it was Hobbes?

Whew! That was a close one!

 

[ferny]

What was?

*whistles*

 

[Corry]

Here is something said about this on another site:

A bit more research.
According to the link below, the Santy worm looks for a string of text at the bottom of a web site. If the site says 'powered by phpBB' then it is vulnerable to an attack.
The words ' Powered by' have been dropped from the latest version

This site still says "powered by"!

 

[MDowdey]

oh god!!!!! run for your lives!!!!!



md

 

[Hertz van Rental]

But I don't wanna get wurms...

 

[Artemis]

Excuse me if im wrong...but two things.

Number 1: Surely the config file has a Htaccess file protecting it.

Number 2: Surely the config file has been chmodded to read only...it must be pritty hard to over go a chmodded file...

Why would the words Powerd by? make a difference? The code around it sure...but they dont need to drop the powerd by words....

Another thing...chase, dont remove the powerd by, just update, otherwise lawsuit! LOL