DragonPrime - LoGD Resource Community
Welcome Guest
  • Good morning, Guest.
    Please log in, or register.
  • August 18, 2019, 10:14:00 AM
Home Forums News Downloads Login Register Advanced Search
* * *
DragonPrime Menu
Login
 
 
Resource Pages
Search

Pages: [1] 2   Go Down
  Print  
Author Topic: Site Hacked  (Read 5813 times)
0 Members and 1 Guest are viewing this topic.
ShadowRaven
Mod God
*****
Offline Offline

Posts: 805


Silence is a virtue...


View Profile WWW
« on: December 03, 2005, 01:31:16 PM »

I have good reason to believe my site was hacked. But it seems that all this person did(that I've seen so far) is deselect me from the 'MEGA USER (enable all permissions)*' preference in the SU flags, and made it so I can't reselect it for myself or anyone else for that matter. It also won't let me select/deselect the 'Enable Translation Tool'.
I have looked in my account in my DB and it still shows me having SU privs, which it would anyway since I still have my other privs. But I can't see how to fix the mega user pref.

Any suggestions would be appreciated...
thanks
~SR
« Last Edit: December 03, 2005, 01:32:24 PM by ShadowRaven » Logged

Talisman
Administrator
Mod God
*****
Offline Offline

Posts: 5484



View Profile WWW
« Reply #1 on: December 03, 2005, 02:17:01 PM »

It's unlikely that your site was hacked, and if it had been hacked, the changes would normally have been not quite so subtle.

It IS possible that you have someone who either does not understand how to use the SU Flags in user editor, or you have someone with legitimate access and nefarious intentions.

To restore your flags, go into phpmyadmin and insert "37486591" in your accounts superuser field.
Logged

Play the latest beta version here on DragonPrime
ShadowRaven
Mod God
*****
Offline Offline

Posts: 805


Silence is a virtue...


View Profile WWW
« Reply #2 on: December 03, 2005, 02:31:49 PM »

Alright, thanks.
Well I know for a fact it wasn't any of my Staff, so it had to be someone else. I just don't know how the person got access to do this.

Thanks for the fix. Smiley
~SR
Logged

XChrisX
Global Moderator
Mod God
*****
Offline Offline

Posts: 4647

Be aware of the squirrel!


View Profile WWW
« Reply #3 on: December 04, 2005, 04:47:18 AM »

Well, you could look into the debuglog of your account, if someone has changed you account with the user editor... Wink
Logged

Running for more than three years now:
ShadowRaven
Mod God
*****
Offline Offline

Posts: 805


Silence is a virtue...


View Profile WWW
« Reply #4 on: December 04, 2005, 03:47:23 PM »

yeah that would be great if the debug log actually worked...it keeps deleting so nothing is ever in it.
Logged

Dannic
Guest
« Reply #5 on: December 04, 2005, 04:37:14 PM »

yeah that would be great if the debug log actually worked...it keeps deleting so nothing is ever in it.

Probably lonny's utilities module.  Might want to check the settings on that to see if you have it set properly.
Logged
scooter2
Guest
« Reply #6 on: December 05, 2005, 06:05:57 AM »

We have our debug log set to stay for 1 week and on every new day it is cleared. This is  a problem cause I have received a YOM telling me one of the Jr. Admins has tried to access /dragons/configuration.php?op=modulesettings&module=dark_felyne from .

not sure if he was working with my husband on something or not, but this took place after we had gone to bed. I know they are working on something but I want to see what is going on. And if the debug deletes every new day that is not good, when the setting is set to stay for one week.
Logged
Booger
Captain of the Guard
***
Offline Offline

Posts: 126


I'm a llama!


View Profile
« Reply #7 on: December 05, 2005, 08:06:22 AM »

there is no separate setting for the debuglog. it actually uses the normal comment expitation setting divided by 10, so if you want the log to last for a week set it to 70 days.

that message means he was somehow trying to get to a page he's not authorised to view, and there won't be anything in the log about it. maybe your husband gave him access to that page while they were working on that something, he timed out and your husband removed his agame settings flag before he logged back on?
Logged
scooter2
Guest
« Reply #8 on: December 05, 2005, 08:39:57 AM »

thank you I will try that
Logged
scooter2
Guest
« Reply #9 on: December 05, 2005, 01:13:39 PM »

Okay I have tried setting the comment comentary to 70 days and that did not work. The debug log  still deleted what I did on the next game day. I also went to Lonny's Utilities and the debug log is set to 1 week.

Logged
SaucyWench
Mod God
*****
Offline Offline

Posts: 2238


I'm a good girl.


View Profile WWW
« Reply #10 on: December 05, 2005, 03:39:44 PM »

Since Scooter hijacked ShadowRaven's thread, I am going to address Shadow's actual problem.

Those of you who have seen previous threads regarding her site will know what she suspects - and after speaking with her privately I believe she is correct that her flags were altered by a player with access to where they should not have been.

Sichae (or someone with the SQL knowledge) can you tell us a query to use to get a listing of all players with SU privs (or all players with MEGAUSER)? At present I am not aware of any way to do it with game tools, and if a farmie quietly had megauser it is also something that *I* would want to know. Thanks =)
« Last Edit: December 05, 2005, 03:49:52 PM by SaucyWench » Logged

SaucyWench
Owner of GemDust.com and Darton City proudly hosted by LunarPages
Sichae
iMod God
SVN Users
Mod God
*
Offline Offline

Posts: 3458


If ya didn't get it by now... you're hopeless...


View Profile WWW
« Reply #11 on: December 05, 2005, 05:51:03 PM »

SQL:
Code:
SELECT name,superuser FROM accounts WHERE superuser>0

Alternative: I just created a module to do just this. You can find it here.
« Last Edit: December 05, 2005, 05:51:46 PM by Sichae » Logged

If you didn't understand anything in the above post, don't try to attempt anything suggested.

SaucyWench
Mod God
*****
Offline Offline

Posts: 2238


I'm a good girl.


View Profile WWW
« Reply #12 on: December 05, 2005, 07:32:01 PM »

I'm way overdue for reminding everyone about this... Sichae, you're fantastic  Smiley

Kiss
Logged

SaucyWench
Owner of GemDust.com and Darton City proudly hosted by LunarPages
Sichae
iMod God
SVN Users
Mod God
*
Offline Offline

Posts: 3458


If ya didn't get it by now... you're hopeless...


View Profile WWW
« Reply #13 on: December 05, 2005, 07:33:05 PM »

I'm way overdue for reminding everyone about this... Sichae, you're fantastic  Smiley

Kiss

Thank you, dear. Smiley
Logged

If you didn't understand anything in the above post, don't try to attempt anything suggested.

Elessa
Faerie
Mod God
*****
Offline Offline

Posts: 3598


short, sweet and to the point


View Profile
« Reply #14 on: December 05, 2005, 07:37:59 PM »

* Elessa rolls her eyes and shakes her head at sichae and saucy, then giggles

aye, thank ye sichae. tis a tool i hath wondered if existed. well, i suppose now it does.
Logged

Uuma ma ten rashwe, ta tuluva a lle

Play the latest beta version here on LoGD DragonPrime - Axebridge
Pages: [1] 2   Go Up
  Print  
 
Jump to:  


*
DragonPrime Notices
Welcome to DragonPrime - The LoGD Resource Community!

Support Us
No funds raised yet this year
Your help is greatly appreciated!
Recent Topics
DragonPrime LoGD
Who's Online
104 Guests, 0 Users
Home Forums News Downloads Login Register Advanced Search