Hacked with Modern

[arturhaddad]

Hello.
Today I got my database and website hacked: news had been changed, new CM's summoning items and destroying all the server.
The hacker deleted all my pages also.
I use MODERN AAC last update and XAMPP.
TFS 0.4.0 REV 3777
I still not understanding how the hacker did it and I really need help to protect my server.

I think that the hackment happened beetween this moments:
My server went down appearing the error: 'Connection lost to mysql database.'
When the server went back the website had the news changed with pornography and my custom pages were deleted.
I was trying to fix it when i saw that a new CM were in game summoning items and killing the players. It also deleted my GOD account.
I think that the hacker hacked my DATABASE because he deleted my GOD account and his CM was an already existing account (maybe lazy, just changed the character name, password and access), but i'm sure that the main creator of account isn't the hacker because he is my rl.

Also the hacker left a message in news page: "Free-exploit website, hum? As*h0le!"

I really hope some replies with suggestions to help me to put my server online again.

Worried,
Artur



(UNIFORM doesn't work to me)

 

[Evil Mark]

Now I'm wondering if the modernACC team are corrupt, or if the hacker just found a crack..

 

[stian]

Naa, because I submitted a fix to a security issue a few hours ago everyone can just look at the code and see how it works. Everyone MUST update to rev 243+.

If you are already hacked, then remove the scaffolding code from controllers/admin.php will help you future.

 

[arturhaddad]

@stian: Now i updated to rev 243, should i still remove scaffolding?

 

[arturhaddad]

~bumping for security reason (everybody has to update it)
stian.. i'm pretty afraid to use it oO, is it safe now? do i still need to remove scaffholding?

 

[Kayan]

No need, but for security is better remove x)