How to secure mutoolz

[darkmohaha]

well first of all i wanna say that mutoolz is a 1 big hole, but for persons and new servers that are looking for max security should do this:

#YOURMUTOOLZDOMAIN.com/install <-- that folder can be accessed by anyone here's an example: www . ********* . host . com "/install/install.php and voila he will just reinstall your db and he's admin and you're team and other databases are still there but he a normal player that shouldnt be admin has now admin access. which no admin wants,so well why not just rename the "install" folder to like lets say : installnoway . then you got your install folder named that... and then when the lets say "hacker" wanna do this and you have changed your "install" folder to a diffrent name then he cant access it .

# ok 1 also big hole is this: www. YOURSERVERDOMAIN . HOST.com ,etc then added: /tmp/cache , well then he is in your cache folder and cache is like a trashcan that holds information about lets say accounts,characters,exp,lvl,etc . but you can use this way to get other players accounts,passwords. and we dont want that too so best way to fix this hole is too take this: Mutoolz_security_upgrade.rar in my attachment, just extract it in your mutoolz folder and run the secure.bat . run it often , that .bat file will erase all containing information in your tmp/cache folder and by that you secured your server from unwanted discussion , or hackers , and your server will be peacefully :angel_hyp and this "Mutoolz_security_upgrade" is 100% clean and cannot harm your server/computer at any way



i wanna thank my friend Commandcom aka Dynamic for making this "Mutoolz_security_upgrade"
and thanks too all others which helped me to reveal and solve theese holes, and all other mucitizens

i will update this post if anyone finds and tell me a new hole ,and i will try to fix it or he already fixed it then i'll add it here and give credits to him .

If you got any questions just post it here and i will check often

 

[Lord From Hell]

BIG THX DuDE I TESTED THIS

 

[sposh]

haha

i just spent a long time learning how to set up my server and after that i quickly set up a forum and web site and never thought about security till this passed my path when i was using search and i freaked at that huge hole .... i cant beleive someone can get into your server through mu toolz hahah the freaking install folder i bet u u could start doing that right now and get into a bunch of servers

 

[goldenix]

i dont trust your update...etc.. so there fore hire is another Solution:

To view the content, you need to sign in or register

 

[Booms]

Thx for this secure , i want smth for clean cache a long time ) and about install folder after installion mu toolz y must delete this folder y not need to rename it !!!
thx again )

 

[Leo]

We cannot trust you.

We sure John_d will post it.

We cannot trust other people than the real creator of the Toolz.

Sorry,

But In my opinion I think it's a keylogger so you can trace the IP (website) and acces the admin on site and hack it.

 

[nvidiadude]

Nice Thx!!!!!

 

[danse]

#YOURMUTOOLZDOMAIN.com/install <-- that folder can be accessed by anyone here's an example: www . ********* . host . com "/install/install.php and voila he will just reinstall your db and he's admin and you're team and other databases are still there but he a normal player that shouldnt be admin has now admin access. which no admin wants,so well why not just rename the "install" folder to like lets say : installnoway . then you got your install folder named that... and then when the lets say "hacker" wanna do this and you have changed your "install" folder to a diffrent name then he cant access it

well about this way ..it was told in mutoolz readme or install guide dun remember so it's actually not big discover ;S

# ok 1 also big hole is this: www. YOURSERVERDOMAIN . HOST.com ,etc then added: /tmp/cache , well then he is in your cache folder and cache is like a trashcan that holds information about lets say accounts,characters,exp,lvl,etc . but you can use this way to get other players accounts,passwords. and we dont want that too so best way to fix this hole is too take this: Mutoolz_security_upgrade.rar in my attachment, just extract it in your mutoolz folder and run the secure.bat . run it often , that .bat file will erase all containing information in your tmp/cache folder and by that you secured your server from unwanted discussion , or hackers , and your server will be peacefully and this "Mutoolz_security_upgrade" is 100% clean and cannot harm your server/computer at any way

about this one i didn know..thanks for warning n upgrade

 

[taddy1]

^^, what is xxx file with out extension for?..

 

[knightpdr]

HI guys, i need a help in doing my 1.02d server. I've downloaded the CzF files here but I'm having some erros while creating the server. Plz make a guide of how to do a 1.02d server.
Thx

 

[commandcom]

:O you even didnt ask for me to put it here
no credits aswell you didnt put guide here how to use etc.
*confused* next time you wanna "help" try to ask first

 

[That-Cool-Guy]

Thats awesome man thnx for the help, btw i got a little trouble with mutoolz can u give me a hand?

 

[Dios]

Well explained, congratulations.

You could also make a .htaccess inside all folders that are dangerous so people with not authorization cannot access them.

Once again, good job.

 

[noobies]

very nice guide ! keep up the good work !

 

[HELL_IN_HEAVEN]

i used this file, it never delete all the dir in tmp dir, then it just creat index.html file to every dir u had mention..