I'll take that I won't even need my 1 finger! <img>

I have it on my site and it works but for the last few days I have the server error. I would guess they are having some issues at the site when you see that error.

You can use admin > crackertracker > IP & UserAgent Blocker.

Notice " *ia_archiver* " this is the Web crawler used by the Alexa search engine
and they block it by default. Just do yahoo the same way if you wish to block it.

Try renaming the index.html to index.bak in the http://babydreamz.net/forums folder, It's running before the index.php file.

also why the second forums dir http://www.babydreamz.net/forums/forums

You can use admin > crackertracker > IP & UserAgent Blocker. Notice " *ia_archiver* " this is the Web crawler used by the Alexa search engine and they block it by default. Just do yahoo the same way if you wish to block it. Do that dan0042, just block them for now! when some one has a...

Have you run into this tool yet?

http://securityjobs.us/xpl/tembak.txt?

I think this one gets tru but I'm not 100% sure.
I have 4 hits from it and the forum goes down to a .script kiddie pr message.

I'm not sure you have the same issue but my JM didn't go blue until he used some admin powers.

did you make any changes in your htaccess file?

All blocks regardless of their permission settings seem to show to Admins.

I would think that the admins need to see everything and would say it was working right.

That looks like the same .script I got hit with, was your site defaced?

Though I have been editing my htaccess to block any traffic form said urls ever again when they start the rotation of domains over at some point. I'm using the ip's not the url's, i know the ip's are proxies but I figure I've a better chance to block. (although that .script didn't work the prox did...

Maybe the hacker had something in one of the mods you installed? Piggy backed the actual mod? That didn't happen.... major pain, they may have found a flaw in the source though. ArangeL may well be right so make sure uploads of php are disabled. Go to admin and look at the ct log manager you see wh...

I don't get how going to plain php will help. I mean You've gone from a software that has 2 security systems to none? I had my site defaced once since i started with IM and using CT's file checker to id the 2 changed files I had the site back up in 2 minutes. I just ftp copies of the changed files f...

yep it was, by thehacker on 2007/07/18 and his score card is....

Total attacks: 42944 of which 7072 single ip and 35872 mass defacements

Every little bit you can put up to block will help, If it stops 1 .script from running it was worth it.