How to protect my website

[nanduzenho]

Good morning, can someone help me protect my website? Because they are managing to get the gamemaster password and destroying the server! PLEASE!!
I use Gesior, I don't know his version

 

[SorketROrk]

Good morning, can someone help me protect my website? Because they are managing to get the gamemaster password and destroying the server! PLEASE!!
I use Gesior, I don't know his version

How do you know if it is the website that needs protection?
Need more info

 

[nanduzenho]

How do you know if it is the website that needs protection?
Need more info

I don't know, maybe the database, they figured out the GOD password. I use Windows 10, maybe I need to do something to protect... Only thing the hacker said is that my site is not secure

 

[Boy67]

You probably left your phpmyadmin unsecured. There are several steps you can take to protect access to it. Just google it.

 

[Itutorial]

You using root as the user to connect to database in website config?

 

[StreamSide]

well thats a bad start, I cant see what server/aac/operating system/web server are you using?

 

[imperianic]

Are you using stock Gesior or have you edited and created new files? Have you checked if the Gamemaster account password was changed? Are you using non secure password? What's your webserver? Did you left PMA open for external access without changing default URI?

 

[nanduzenho]

You using root as the user to connect to database in website config?

Yes

Post automatically merged: Mar 29, 2022

well thats a bad start, I cant see what server/aac/operating system/web server are you using?

Gesior, I don't know the version and operating system Windows 10

Post automatically merged: Mar 29, 2022

Are you using stock Gesior or have you edited and created new files? Have you checked if the Gamemaster account password was changed? Are you using non secure password? What's your webserver? Did you left PMA open for external access without changing default URI?

How do I change the PMA? I am using xampp on Windows 10 OS

 

[imperianic]

Yes

Post automatically merged: Mar 29, 2022

Gesior, I don't know the version and operating system Windows 10

Post automatically merged: Mar 29, 2022

How do I change the PMA? I am using xampp on Windows 10 OS

What's your site buddy? The most common case is SQLi in an unprotected web server

 

[nanduzenho]

What's your site buddy? The most common case is SQLi in an unprotected web server

inwar.com.br

 

[imperianic]

inwar.com.br

Are you using stock Gesior or have you edited and created new files?
Have you checked if the Gamemaster account password was changed after "hack" or not?

 

[nanduzenho]

Are you using stock Gesior or have you edited and created new files?
Have you checked if the Gamemaster account password was changed after "hack" or not?

I created some files in the pages folder, the gamemaster password was not changed, I changed it after what happened

 

[imperianic]

I will send in PVT some information.

 

[Itutorial]

You shouldn't use the root as your database user. You need to make a custom one with certain privilege's. If you use root it leave you open to website attacks.