You are missing our premiere tool bar navigation system! Register and use it for FREE!

NukeCops  
•  Home •  Downloads •  Gallery •  Your Account •  Forums • 
Readme First
- Readme First! -

Read and follow the rules, otherwise your posts will be closed
Modules
· Home
· FAQ
· Buy a Theme
· Advertising
· AvantGo
· Bookmarks
· Columbia
· Community
· Donations
· Downloads
· Feedback
· Forums
· PHP-Nuke HOWTO
· Private Messages
· Search
· Statistics
· Stories Archive
· Submit News
· Surveys
· Theme Gallery
· Top
· Topics
· Your Account
Who's Online
There are currently, 197 guest(s) and 0 member(s) that are online.

You are Anonymous user. You can register for free by clicking here
Nuke Cops :: View topic - Could some1 help me secure my site? [ ]
 Forum FAQ  •  Search  •   •  Memberlist  •  Usergroups   •  Register  •  Profile •    •  Log in to check your private messages  •  Log in

 
Post new topic  Reply to topicprinter-friendly view
View previous topic Log in to check your private messages View next topic
Author Message
tail_gunner
Nuke Cadet
Nuke Cadet


Joined: Jan 13, 2005
Posts: 6


PostPosted: Mon Jun 04, 2007 7:24 pm Reply with quoteBack to top

I was wondering what i could do to secure my site more? im running nuke 7.5, what version of NukeSentinel should i run, and can some1 show me where to download it, what else can i do?
Find all posts by tail_gunnerView user's profileSend private message
Slackervaara
Captain
Captain


Joined: Sep 13, 2003
Posts: 355


PostPosted: Mon Jun 04, 2007 11:38 pm Reply with quoteBack to top

I have protected my admin.php through the .htaccess file, as described below:
http://www.nukesecurity.com/modules.php?name=Forums&file=viewtopic&t=18&highlight=htaccess
It works very well and I also use NukeSentinel.
Find all posts by SlackervaaraView user's profileSend private message
tail_gunner
Nuke Cadet
Nuke Cadet


Joined: Jan 13, 2005
Posts: 6


PostPosted: Wed Jun 06, 2007 2:22 pm Reply with quoteBack to top

k i did that, plus upgraded to patch 3.3, and installed the latest nuke scentinal
Find all posts by tail_gunnerView user's profileSend private message
Slackervaara
Captain
Captain


Joined: Sep 13, 2003
Posts: 355


PostPosted: Wed Jun 06, 2007 5:30 pm Reply with quoteBack to top

Congratulations! You should be pretty safe now, because after installing Sentinel my site have not been hacked in two years. Have you configured and thus activated Sentinel, because first I omitted that detail?
Find all posts by SlackervaaraView user's profileSend private message
telli
Support Mod
Support Mod


Joined: Aug 21, 2003
Posts: 335


PostPosted: Tue Jun 12, 2007 11:32 am Reply with quoteBack to top

If your feeling really froggy you could go in and rename all your admin functions. Maybe even rename the admin database table.

_________________
[img]http://www.codezwiz.com/extern.php?get=sig[/img]
http://www.codezwiz.com
PHPNuke Themes
$3.99 500 MB Storage & 20 GIG Trans w/ NO limit MYSQL
Click Me
Find all posts by telliView user's profileSend private message
BozWolf
Nuke Soldier
Nuke Soldier


Joined: Apr 07, 2005
Posts: 18


PostPosted: Wed Jul 18, 2007 4:05 am Reply with quoteBack to top

see Sentinel doesnt work for me Smile everytime i install it i get Access Denied in my Admin panel. I was checking my server few minutes ago and found this Nationwide Internet Bankings and bunch of other stuff that i did`nt even upload them there, what scared me the most is finding o program thats called iRcHaTaN-DeFacer and have no idea how it got there.
Find all posts by BozWolfView user's profileSend private message
Slackervaara
Captain
Captain


Joined: Sep 13, 2003
Posts: 355


PostPosted: Wed Jul 18, 2007 4:34 am Reply with quoteBack to top

It has happened also that files have been uploaded to my site also. It seems in my case that they use upload functions in various modules that I have installed. To my .htaccess I have added:

<Limit PUT DELETE>
order deny,allow
deny from all
</Limit>

and it seems have stopped this problem. If you have access to the logs of your site you can find out exactly how they uploads files to your site.

Concerning Sentinel I have no clue, but I hope someone else can help you, Have you used the correct patch to your PHP-Nuke and Sentinel version?
Find all posts by SlackervaaraView user's profileSend private message
BozWolf
Nuke Soldier
Nuke Soldier


Joined: Apr 07, 2005
Posts: 18


PostPosted: Wed Jul 18, 2007 4:51 am Reply with quoteBack to top

i tried once only and didnt work. i was hacked few times by turkish hackers, somehow thay managed to add them selfes as Admin. Came here and heard everyone recommends Sentinel and when i installed i got the message Access Denied in my Admin Panel.
Find all posts by BozWolfView user's profileSend private message
Slackervaara
Captain
Captain


Joined: Sep 13, 2003
Posts: 355


PostPosted: Fri Jul 20, 2007 3:09 am Reply with quoteBack to top

Have you tried to ask in the official NukeSentinel forum:
http://ravenphpscripts.com/forum61.html
Find all posts by SlackervaaraView user's profileSend private message
Display posts from previous:      
Post new topic  Reply to topicprinter-friendly view
View previous topic Log in to check your private messages View next topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



Powered by phpBB © 2001, 2005 phpBB Group

Ported by Nuke Cops © 2003 www.nukecops.com
:: FI Theme :: PHP-Nuke theme by coldblooded (www.nukemods.com) ::
Powered by TOGETHER TEAM srl ITALY http://www.togetherteam.it - DONDELEO E-COMMERCE http://www.DonDeLeo.com - TUTTISU E-COMMERCE http://www.tuttisu.it
Web site engine's code is Copyright © 2002 by PHP-Nuke. All Rights Reserved. PHP-Nuke is Free Software released under the GNU/GPL license.
Page Generation: 0.154 Seconds - 234 pages served in past 5 minutes. Nuke Cops Founded by Paul Laudanski (Zhen-Xjell)
:: FI Theme :: PHP-Nuke theme by coldblooded (www.nukemods.com) ::