Securing Your Server * 1x Game Server *

Quote:

---

Originally Posted by sladlejrhfpq

I did every steps, and my server still got hacked. my MSSQL has been set to local, all ODBC resources are User DSN now, and i added to windows firewall with advanced security the ports you wrote: 15880, 15882, 15885, 15883, 19980, 8080, 1433, 3306, and 32000.

mmc.exe is console root for me, maybe i misunderstood something.
Please help me.

---

Then its your website.

Like i said, this protects against 90% of the hacks out there, but if your website is not secure then you will get hacked.
Because all the SQL injections are done locally!

To be honest, all you need is:
1) Register page
2) Download page

thats all!

---------------------------

UPDATE://

- Added 32000 to the list, forgot about it!

Quote:

---

Originally Posted by Jangan

Then its your website.

Like i said, this protects against 90% of the hacks out there, but if your website is not secure then you will get hacked.
Because all the SQL injections are done locally!

To be honest, all you need is:
1) Register page
2) Download page

thats all!

---------------------------

UPDATE://

- Added 32000 to the list, forgot about it!

---

Thank you for reply.
Hm.. at school i learned PHP for 1 year, and as i remember teacher told me something about "addslashes()", i am not expert in it, so what do you think, would it help?

btw, it is strange, because my server got hacked with the billing hack i think, because TB_User table deleted, and mssql turned off, but 8080 port is closed.

add slashes is not enough i suggest decent anti_injection function

Quote:

---

Originally Posted by LastThief

add slashes is not enough i suggest decent anti_injection function

---

it was not the webpage i think. I tried to make it, can you try to hack it? IP is 176.9.35.233.

Quote:

---

Originally Posted by sladlejrhfpq

it was not the webpage i think. I tried to make it, can you try to hack it? IP is 176.9.35.233.

---

lol add slash is nothing.
There is just about a milllion way you can inject sql man.


1) Threw xampp
2) Threw the website
3) Threw altering the forum


like i said, use one of the websites released here.

Quote:

---

Originally Posted by Jangan

lol add slash is nothing.
There is just about a milllion way you can inject sql man.


1) Threw xampp
2) Threw the website
3) Threw altering the forum


like i said, use one of the websites released here.

---

okay, thanks. I said i am beginner in PHP :laugh:
btw i think security is ok now, but i will see :lol:

I did ports and mssql settings.
but i dont understant from ODBC settings.
What will i do?
Only move sources from system dns to user dns?

add ur data source in User DSN not in System DSN

Quote:

---

Originally Posted by sladlejrhfpq

it was not the webpage i think. I tried to make it, can you try to hack it? IP is 176.9.35.233.

---

Not found some thing is wrong O_o

Not Found

HTTP Error 404. The requested resource is not found.

I got always Ddos attack botnet :S

Quote:

---

Originally Posted by ModGift

I got always Ddos attack botnet :S

---

get a better host, a host that will block that for you!

Quote:

---

Originally Posted by Jangan

get a better host, a host that will block that for you!

---

I got the same problem...
i get C9 error when i use the ip from outside..
when i use lan ip i can connect.. whats the problem?

anyone knows?

Quote:

---

Originally Posted by Chrysler

I got the same problem...
i get C9 error when i use the ip from outside..
when i use lan ip i can connect.. whats the problem?

anyone knows?

---

port forwarding?

port is 15779 i abled on router settings.

Quote:

---

Originally Posted by Jangan

port forwarding?

---

port is 15779 i abled on router settings.

use hamachi then. not really sure.