Gesior 0.6.1 hacked 2 times

[lolaso11]

hello, this is my problem..
im using gesior acc 0.6.1 and xampp as web page of my ot... 4 days ago i got hacked i dont know how, i think some gesior vulnerability, the hacker got acces to my data base he know god accs and players.. he give premiun points and lvl to hes characters... and when i delete hes accounts he change my index.php to he own custom pages telling "you have just hacked, your security sux" and "god luck with your OT"

wath i do? change mysql acces pasword, gods accs and look in data base the acces permision of all players...

today the same guy hack me again -.-
i dont know what to do
i just have rented a dedicate server with windows server 2008 r2 but im no sure to upload my ot to my dedicate server for this problem

i hoppe some can help me bc i have worked arround 1 mont i my project

thx any way

 

[Bogart]

gesior + xampp = bai bai

use MAAC and Uniserver instead.

 

[lolaso11]

where can i get maac? do you mean modern acc? have tibiacom template? what version you recomend?
can i use iis form windows server? it is recomended?
thx

 

[Bogart]

where can i get maac?
can i use iis form windows server? it is recomended?
thx

lol, hosting a server in windows, lmao.
yes, uniserver is for windows.
http://otland.net/f479/nothing-full...niform-server-forgotten-server-0-3-6-a-77593/
http://otland.net/f479/website-installing-modern-aac-uniform-server-91951/

 

[lolaso11]

i have a question... if i have in plain password encript have and change in confing lua to sha1 my old db still working?

 

[Bogart]

i have a question... if i have in plain password encript have and change in confing lua to sha1 my old db still working?

don't think so.

 

[lolaso11]

too much thx i will try to use it
anyway you think plain password encript is easy to hack?

 

[Korrex]

i have a question... if i have in plain password encript have and change in confing lua to sha1 my old db still working?

It could work if you encrypt all passes with SHA1 before launching.

 

[zerosmoke]

TFS 0.2.9 and Modern AAC aren't very compatible. The installation leaves out columns in tables that need to be added and modified and you're left patching up the mess. You can get Uniserver running with Gesior though. Just sha1 hash your passwords and turn on sha1 encryption in your config.lua.

 

[lolaso11]

someone know some automatic way to encrip all my accounts in db ?? have 497 >.<

 

[warhawk]

in Xampp du you have delete the folder calld "webdav"?

 

[picachu]

Start using modern AAC.
Its faster and better-scriptted =]
And doesnt have these fucking hack things.
Or just wait for the new gesior aac ;p