Clubhabbo is haxxed

[Black_Apalachi]

Anyway apart from the news, did any other part of the site get affected?

Btw, slightly off topic, but when Ryan mentioned HFFM it reminded me. Do HFFM an ClubHabbo have the same owners/management? I know Ryan is CH owner but is there anyone else who runs both? I'm only asking because they both seem really similar.

[benno123]

an australian based site called wearelegion is hacking all of the official fansites cutenews.
every official australian fansite has been hacked and they're starting to hack international sites.
just a piece of advice if you'd like the news that they delete. do a backup.
there's that cutenews exploit that lets them in. they don't need a password or anything, just one of the users account names.

[beau03]

Anyway apart from the news, did any other part of the site get affected?

Btw, slightly off topic, but when Ryan mentioned HFFM it reminded me. Do HFFM an ClubHabbo have the same owners/management? I know Ryan is CH owner but is there anyone else who runs both? I'm only asking because they both seem really similar.

I noticed too but I don't think Ryan and Carnio get along to well!

[siz]

Im in a krew that haxxed habbox and runescape...

Its no big..

[Sabbath]

Im in a krew that haxxed habbox and runescape...

Its no big..

OMG SIZROCKS GANG GONNA PWN YOU!

[Pyroka]

OMG SIZROCKS GANG GONNA PWN YOU!

LOLIRL! Well that's interesting! Why not just put the cutenews on a seperate DNS to the website, and iFrame it? I guess the impact shouldn't be as bad then if they were to hack it unlike how it is most of the time. I guess that's a makeshift way of fixing it.

[Hitman]

LOLIRL! Well that's interesting! Why not just put the cutenews on a seperate DNS to the website, and iFrame it? I guess the impact shouldn't be as bad then if they were to hack it unlike how it is most of the time. I guess that's a makeshift way of fixing it.

Good idea but people would still be able to find where it's hosted.

I'd suggest another news script.

[Pyroka]

Good idea but people would still be able to find where it's hosted.

I'd suggest another news script.

Obviously they would? All they'd have to do is look into the source code, however the consequences wouldn't be so severe.

[Hitman]

Obviously they would? All they'd have to do is look into the source code, however the consequences wouldn't be so severe.

Well, from what I know (not much haha) they could get into cutenews and delete, add, edit news etc... redirect the page and all that. So if it's still being shown on the page from the other server and it got 'hacked' then it could be redirected, deleted etc... on the main site.

[Pyroka]

Well, from what I know (not much haha) they could get into cutenews and delete, add, edit news etc... redirect the page and all that. So if it's still being shown on the page from the other server and it got 'hacked' then it could be redirected, deleted etc... on the main site.

Regular backups combat the deletion & edition. As for addition, just a recovery account would be ok, somewhere placed on the cutenews as an invisible user, even to administrators (I'm sure it could be done). Redirecting the page which is in an iFrame? Oh the pain of it all. iFrames can be easily closed too, so if there was a problem all they need to do is redirect it to a maintenance page. It's not as hard as it sounds, it's just a little bit of precaution.