I just lost 3 XOOPS 2.0 sites to hackers how do I keep this from happening to v 2.3.1. How do turn on safe_mode - Off to on. Or better yet what can I do to make my sites safe.

Johnnyb

[Moderator's Comment: I deleted your double post. Sailjapan]

The turning on/off safe mode should be done from your host or if you're using your own server in php.ini settings.

If you have hosted website you should be able to open an administration site at your host's website, and there see (fi. in advanced settings) if you can change safe mode settings. If you cannot you should talk to your host to make him change to your preferences.

If you have your own server,
in php.ini find the line with safe_mode, and change to what you need.
For instance:
safe_mode = Off

If you have httpd.conf then add in this
safe_mode = Off

Also be sure to use install Protector
https://xoops.org/modules/repository/singlefile.php?cid=59&lid=1687

Check also your Apache logfiles to see how the hacking has been done. It is not always XOOPS and its modules that are aused as entrance. If you have unsave modules, you won't get secure by upgrading the core. Also the Protector module has to be installed on the right manner.

Also make sure that all folders contain an index.html file, For instance the original XOOPS 2.3.3 had a lot missing. If download missing index files from xoopsnordic if you need :)
http://www.xoopsnordic.org/modules/PDdownloads/singlefile.php?cid=86&lid=44