MIGO site HACKED

[+michigansnorkelers]

I was upset to see the MIGO (Michigan Geocaching) site hacked. Who knows, it could happen here next?

 

Here is how I got around the hack to still access the MIGO site.

 

Assuming ALL of the site wasn't hacked, I used my browser (firefox) to look up recently accessed webpages. Here is one:

 

http://www.migoonline.org/modules.php?

 

This got me past the hacked page, but I still couldn't access the forums page.

 

From there I went to forum search, and searched for michigan.

 

From the results, I saw all the subforums. (General Geocaching Discussion, SE Chapter, etc) I could get to the subforums directly from here by clicking on one of them.

 

So, make a note of this for next time you run across a hacked webpage.

 

-----------------------------------------------

 

UPDATE: I later noticed that the hacker left a couple links active on the right edge of the page. If you click on the membership link, you can get to the page from which you can access the forum search.

 

Man, I hate all this hacker X$#%!!

Edited May 20, 2007 by michigansnorkeler

[TeamCypherX]

What would Turkish hackers want to hack a Geocaching site for? And why Michigan out of all places. Someone must really be hating us Michigan folk for some reason.

[+thefoolandhisqueen]

These aren't even true hackers. They're exploiting well known php vulnerabilites. Someone discovered it long ago, and they just copy them.

 

For some reason they think it's entertainment to scour the web and look for sites they can get their name on. Must be looking for their 15 minutes of fame or something. I doubt they even have a clue what geocaching is.

[Son of Cyclops]

How can we fix this?

[+thefoolandhisqueen]

Should be easy enough to rip out the code they added to put up their stupid banner.

 

But, removing it won't fix the problem.

 

We need to figure out exactly what hole they're exploiting and fix it. It's likely as simple as a version upgrade on the phpBB software.

[+CYBret]

Ugh. Hate to hear it.

 

Since this is more of a topic for the local boards I'm closing out this topic. Thanks for getting word out though.

 

Bret