Shoutbox

Well, i'm running myBB on my forums, and just now, i've had 12 emails saying the same thing, just with a couple of different logins (the several different logins and passwords are below, a couple of them were used twice), and same IP:


1. A user has tried to access the Administration Control Panel for Star Dust Graphics Forums. They were unable to succeed in doing so.
Below are the login details:

Username: \' or 1=1 /*
Password: blank (MD5: 8e15625d6c158ec48f374efb77bd2714)

2. Username: or 1=1
Password: blank (MD5: 8e15625d6c158ec48f374efb77bd2714)

3. Username: \'or 1=1/*
Password:  (MD5: d41d8cd98f00b204e9800998ecf8427e)

4. Username: or 1=1
Password: blank (MD5: 8e15625d6c158ec48f374efb77bd2714)

5. Username: or 1=1
Password:  (MD5: d41d8cd98f00b204e9800998ecf8427e)

6. Username: or 1=1 /*
Password: blank (MD5: 8e15625d6c158ec48f374efb77bd2714)

7. Username: or 1=1/
Password:  (MD5: d41d8cd98f00b204e9800998ecf8427e)


I've had things like this in the past too. How do you stop these stupid things, apart from banning IP's, or what causes them to happen? Is it some stupid bot or command or something a person puts in, or just an idiotic person?

Some one who is trying to sql inject your login.

but because it adds slashes to the quotes then it is unsucessfull....

You could always change the admin user name and make sure you have the latest myBB

quote:

---

Originally posted by mwe99
You could always change the admin user name and make sure you have the latest myBB

---

lol.. it wont really help to change the admin name. And i do have the latest myBB, and i'm sure I have all the latest patches.

Just got two more of the flipping emails, and banned the IP. :\ (it was the following one twice.)


1. A user has tried to access the Administration Control Panel for Star Dust Graphics Forums. They were unable to succeed in doing so.
Below are the login details:

Username: \' or 1=1 /*
Password:  (MD5: d41d8cd98f00b204e9800998ecf8427e)


I feel like something really weird is going on. It's not just that i'm suddenly getting loads of these, but also, since last night, my reputation mod has stopped working, and now only the old one is on there. The files have not gone off the server, nor has anyone other than me, been in the admin panel. I checked my admin logs, and everything it said i'd done, I had done, and clearly remember doing so. This is so weird, and its freaking me out.

someone has ftp access now

i do and you do but i have been on it. check your raw access logs