Moo. Well, I didn't foresee making another topic with this title. It's rather apparent that we've been hacked. Through a security hole in IPB, bruteforcing of a password, I don't really know. I've asked our host to take a look into it, so hopefully we can get some leads on this. I have an IP address and it isn't a proxy, so with some luck we can take care of this hacker.
The next course of action would be for me to find a backup of the database so we can reset everything. The logical place for this to be is one that I can't access right now, so we're going to have to wait until I get the root control panel password again.
As for everyone else...
First, change your passwords, and make them hard to guess (staff especially). I make no gaurantees on security at this point. Don't forget your old password though, if I find a backup it will be changed. Also,
the lost password function is disabled. So, please remember your password.

Also, I understand a lot of us lost minerals and post counts. There's more important issues. If I locate a backup, these will be restored.
Possibilities...
1. He only got into me and IP's v4 accounts and wreaked havoc via Invision Board (v4). No problem at all.
2. He got into the site via the root control panel. Big problem, but one that won't happen because I changed the password to something so long and so filled with ASCII characters and spaces that it can't be accessed at all.
3. He has the database password. We're screwed until #2 gets fixed.
As of yet, I have found no evidence of anything but possibility #1.
So basically, no major action until that password mentioned in #2 gets reset.
ยป Topic Locked