Windows They're hacking into my database?

[niti]

Hello dear OTLAND, How dafuq can they hack into my database and give theirself GOD? , I'll give rep+ if we solve this.

 

[Ninja]

You've got security vulnerabilities and that's your issue. Are you using Gesior or Modern?

 

[Kisskotte]

What program are you using for your mysql?

 

[niti]

Geisor. 0.3.6

Ninja uhm.. What do you mean? How can i fix it or.. Help me out i beg you! I'll give rep+

 

[Evan]

What do you use? XAMPP or Uniform, that's what he means

 

[Troll Scripter]

0.3.6 has many vulnerabilities, google "gesior exploits" and read Red's post about how to fix the exploits

 

[niti]

Xampp

Which shall i use :S? I'm sorry for double posts.

Could you gimme the link?

 

[N2wb1e]

Could you gimme the link?

Let me google that for you

 

[walkingdragon]

http://otland.net/f16/websites-port-156645/

Doing what is posted there should also help against hackers aswell as DDoSers and PoD (Ping of Death) and whatnot.

 

[niti]

Well thanks man but there's a code that i can't find in my GUILD.PHP

in guilds.php:

Replace:
PHP Code:
$guild_logo = $guild->getCustomField('logo_gfx_name'); if(empty($guild_logo) || !file_exists("guilds/".$guild_logo)) $guild_logo = "default_logo.gif";

Can some1 help me out with that to put in,? Can some1 just gimme A RIGHT ONE and be honest without hacking.

 

[Ninja]

Uploading guild logos exploit can only be abused on nginx which uses php-cgi.

Tips:
- Use SHA1 Encryption.
- Remove News Ticker. If someone is abusing it correctly he or she might be able to access your database.
- Depends on your house.php, can be a SQL injection possibility in it.