OUR HABBO

[Romanity]

If your going to into UK laws and policy you are most likely breaking the act by giving any old one access to the databases. Why do you need to give anyone full access to Cpanel/main ftp or/and mysql?

If they got though the user system I would scrap it, seriously.

Good look with it anyway.

Access to cPanel and the Databases are extremely restricted to very senior and trusted members of staff. However odds are from now on, only I will have access.

No laws are being broken by them being able to view the data in the database, laws begin to be broken when they give out that information, as one member of staff did indeed do.

Scrapping the usersystem is something I have conciderd a hell of a lot recently, however I do not believe OurHabbo.Net would be the same if it did not have a usersystem. However I will be increasing security on it A LOT.

[Luckyrare]

Access to cPanel and the Databases are extremely restricted to very senior and trusted members of staff. However odds are from now on, only I will have access.

No laws are being broken by them being able to view the data in the database, laws begin to be broken when they give out that information, as one member of staff did indeed do.

Scrapping the usersystem is something I have conciderd a hell of a lot recently, however I do not believe OurHabbo.Net would be the same if it did not have a usersystem. However I will be increasing security on it A LOT.

Well, if I was you right now. Only give cpanel to staff who actually need it, get someone who can do mysql injections and so on to test it to see if they can get into the admin panel if thats a problem. Take it from someone who knows about running a fansite with loads of great members, was nominated to be official (top 20), even more amazing staff and then was all messed up by kr3ws. Honestly.

[?php?]

Danny it was your forum attacked by *****, because of something to do with hosting weren't it?, Trust mr xroyal, if you want ure fansite popular, ure gunna expect stuiped idiots, to try and gain access, to be popular ect.. and to put down as good hackers or something, i think you should really increase the scurity allot, P.S, Your staff must be really stuiped to give database details away.
I would only give jobs to poeple i really trust.

[Blob]

Danny it was your forum attacked by *****, because of something to do with hosting weren't it?, Trust mr xroyal, if you want ure fansite popular, ure gunna expect stuiped idiots, to try and gain access, to be popular ect.. and to put down as good hackers or something, i think you should really increase the scurity allot, P.S, Your staff must be really stuiped to give database details away.
I would only give jobs to poeple i really trust.

Yes I wonder if my decision for you on HabBlob was correct lol.

[Romanity]

Danny it was your forum attacked by *****, because of something to do with hosting weren't it?, Trust mr xroyal, if you want ure fansite popular, ure gunna expect stuiped idiots, to try and gain access, to be popular ect.. and to put down as good hackers or something, i think you should really increase the scurity allot, P.S, Your staff must be really stuiped to give database details away.
I would only give jobs to poeple i really trust.

True, I cant see how I can increase security anymore than it is... any ideas on how to increase it?

Well, if I was you right now. Only give cpanel to staff who actually need it, get someone who can do mysql injections and so on to test it to see if they can get into the admin panel if thats a problem. Take it from someone who knows about running a fansite with loads of great members, was nominated to be official (top 20), even more amazing staff and then was all messed up by kr3ws. Honestly.

Currently only I have access to cPanel and its impossible to get into the email I am using as my contact email.

Know anyone who can inject well?

[GoldenMerc]

xRoyal know who it was and how it happned,The site was closed to try and update the security.
Good luck to doing that.

[Lycan]

Wow that sucks, as we are stating Uk Law Legislations i thought i'd bring up the Computer Misuse Act 1990 which is the law that is meant to be protecting you from being hacked , also covers the bad things that will happen to thoose people if caught

its a nice read

[?php?]

Xroyal, ways toincrese your security, was it done through the usersystem or database, if it was done through the usersystem youjust need latest mysql injection updates and that, Pm me with ure msn ill add you and help you more, if it was done via cpanel or ect, then you'll need to contact ure server host because, the servers are ament to be secure.

[ADAMS]

Doesnt Ourhabbo have a reseller with Galaxy-webhosting???

If you are with them Galaxy are moving servers very soon [3rd] When they move the data on to there server you might get your database's back

[Romanity]

Wow that sucks, as we are stating Uk Law Legislations i thought i'd bring up the Computer Misuse Act 1990 which is the law that is meant to be protecting you from being hacked , also covers the bad things that will happen to thoose people if caught

its a nice read

I am aware of the Computer Misuse Act of 1990

Xroyal, ways toincrese your security, was it done through the usersystem or database, if it was done through the usersystem youjust need latest mysql injection updates and that, Pm me with ure msn ill add you and help you more, if it was done via cpanel or ect, then you'll need to contact ure server host because, the servers are ament to be secure.

We have been trying to increase security as much and possible, and I will PM you shortly.

xRoyal know who it was and how it happned,The site was closed to try and update the security.
Good luck to doing that.

And we are updating security

Doesnt Ourhabbo have a reseller with Galaxy-webhosting???

If you are with them Galaxy are moving servers very soon [3rd] When they move the data on to there server you might get your database's back

We are hosted by jjr-servers.net who I believe have a reseller with them. The database has been restored, and backups are being done every few hours automatically