Site secure? Yes? No?

Posted: Sun Nov 19, 2006 11:23 pm

I'm wondering if anyone can tell me if my site is secure or not. I'm not sure if you can just tell by looking at it or by checking the version number.

I realize my site may be hacked but I'd like to know my level of security so I can decide if I need to take any type of action.

And no, I haven't installed any security updates/add-ons. And no, I haven't updated anything from these versions.

My site is www.editedout.com

Thanks.

Site Admin Joined: Aug 17, 2003 Posts: 12397

If you are using the default phpNuke, no - you are not secure. I don't hack sites, so I can't say what your specific vulnerabilities are.

Please get and install:
- latest Patched files for your version at http://www.nukeresources.com
- Nuke Sentinel from http://www.nukescripts.net

Private Joined: Oct 08, 2005 Posts: 43 Location: York UK

that site is not secure

Captain Joined: Sep 13, 2003 Posts: 314

Read this also how to gain addition securrity through the .htaccess file
http://www.nukesecurity.com/modules.php?name=Forums&file=viewtopic&t=18&highlight=htaccess

Posted: Mon Nov 20, 2006 7:47 pm

Thank you. I'm pretty much inept in PHP so I appreciate your help...but need more:

Can you please tell me exactly which files to download by posting the URLs?

I presume I need this version of Nuke Sentinel: http://www.nukescripts.net/modules.php?name=Downloads&op=getit&lid=1049

That was the only thing I could really figure out with any certianty.

Thanks....

Site Admin Joined: Aug 17, 2003 Posts: 12397

The Patched files for your version from http://www.nukeresources.com

Posted: Mon Nov 20, 2006 9:31 pm

Evaders99 wrote:

The Patched files for your version from http://www.nukeresources.com

OK but which files do I need? I can see that my version is 2.0.6 of PHP-Nuke Port and phpbb 2.0.6 (the same thing?).

Again, this is all new to me, so I appreciate/need your help, thanks.

Site Admin Joined: Aug 17, 2003 Posts: 12397

Your version of phpNuke

Posted: Tue Nov 21, 2006 9:39 pm

Sure but I couldn't find anything for version 2.0.6. Maybe I'm looking at the wrong version number. Are patches for my version even there?

Thanks again...

Site Admin Joined: Aug 17, 2003 Posts: 12397

That isn't a version of phpNuke.
To get your phpNuke version, look for the version number in the config table

Posted: Wed Nov 22, 2006 8:15 pm

I looked in www/html/phpnuke/config.php

Is that correct, because I didn't see the version there...

If that's wrong, what should the file be called.

Again, I know next to nothing about this stuff.... Rolling Eyes

Thanks from Singapore.

Captain Joined: Sep 13, 2003 Posts: 314

He means that you should look in your nuke_config table in your database. You can view it with the help of the program phpMyAdmin.

Posted: Thu Nov 23, 2006 12:44 am

Slackervaara wrote:

He means that you should look in your nuke_config table in your database. You can view it with the help of the program phpMyAdmin.

I'm hopeless man...does this mean I have to go to www.myurl/phpnuke/admin.php and find it somewhere there? If so, where?

Thanks.

Captain Joined: Sep 13, 2003 Posts: 314

The web hotel you uses probably have phpMyAdmin installed for you. I got information from my web hotel how I could use phpMyAdmin.

Posted: Thu Nov 23, 2006 1:04 am

Slackervaara wrote:

The web hotel you uses probably have phpMyAdmin installed for you. I got information from my web hotel how I could use phpMyAdmin.

OK so check with my hosting company? Is that what you meant? Damn, wait until I have to install this thing.... Shocked