Security
  Home arrow Security arrow Regaining Control of a Hacked PHP-Nuke...
Dev Shed Forums 
Administration  
Apache  
BrainDump  
DHTML  
Flash  
Java  
JavaScript  
Multimedia  
MySQL  
Oracle  
Perl  
PHP  
Practices  
Python  
Reviews  
Security  
Style-Sheets  
Web Services  
XML  
Zend  
Zope  
Forums Sitemap 
IBM® developerWorks 
Dedicated Servers 
E-Commerce Hosting 
Linux Web Hosting 
Managed Hosting 
Small Business Hosting 
Download TestComplete 
VPS Hosting 
Weekly Newsletter

 
Developer Updates  
Free Website Content 
IBM Developerworks
 RSS  Articles
 RSS  Forums
 RSS  All Feeds
Write For Us Get Paid 
Request Media Kit
Contact Us 
Site Map 
Privacy Policy 
Support 
 USERNAME
 
 PASSWORD
 
 
  >>> SIGN UP!  
  Lost Password? 
SECURITY

Regaining Control of a Hacked PHP-Nuke Site
By: Vinu Thomas
  • Search For More Articles!
  • Disclaimer
  • Author Terms
  • Rating: 4 stars4 stars4 stars4 stars4 stars / 35
    2004-05-18

    Table of Contents:
  • Regaining Control of a Hacked PHP-Nuke Site
  • Bugs and How
  • Regain your Site
  • Cleaning up

  • Rate this Article: Poor Best 
      ADD THIS ARTICLE TO:
      Del.ici.ous Digg
      Blink Simpy
      Google Spurl
      Y! MyWeb Furl
    Email Me Similar Content When Posted
    Add Developer Shed Article Feed To Your Site
    Email Article To Friend
    Print Version Of Article
    PDF Version Of Article
     
     
     
    ADVERTISEMENT

    PCmover - $15 Off with Coupon Code CJPH7Q

    Regaining Control of a Hacked PHP-Nuke Site
    (Page 1 of 4 )

    PHP-Nuke is spreading over the Internet as a popular CMS system. If you have a PHP-Nuke installation which has been hacked into, read on to find out how to regain control of your site. If your site hasn't been hacked, read on to learn how to secure your installation.

    Introduction

    PHP-Nuke is widely used, open source content management system (CMS) using PHP and MySQL. PHP-Nuke allows you to add and edit content on to your site without having to play around with HTML files. The whole content system runs off a database. Apart from MySQL, this CMS also supports SQL Server, Oracle, Access and Postgres databases. This allows PHP-Nuke to run on most platforms.

    PHP-Nuke allows you to integrate extra functionality to the site, by adding them as modules. This modular concept of CMS allows webmasters to customize the functionality of the CMS system to their requirement. PHP-Nuke has various built-in modules like user registration, downloads, news, article sections, FAQ and web links. Apart from the built in modules, there are a variety of third-party modules which add in a lot more functionality to this CMS.

    I've been running PHP-Nuke to manage content on my site since 2003. A lot of people have posted their views online stating that this system was quite insecure. I didn't pay much heed to these warnings, since this is one of the more popular CMS systems on the Internet. I had thought that since a lot of people were working on the system, all the bugs would be fixed up soon. I was in for a shock recently when my PHP-Nuke installation was hacked. In this article I have outlined how to overcome an attack on your Nuke installation and patch up the system to prevent further attacks. Even if your installation has not been hacked into yet, read on to learn how patch up your site to prevent such attacks on your site.

    More Security Articles
    More By Vinu Thomas


     

       

    SECURITY ARTICLES

    - An Epilogue to Cryptography
    - A Sequel to Cryptography
    - An Introduction to Cryptography
    - Security Overview
    - Network Security Assessment
    - Firewalls
    - What’s behind the curtain? Part II
    - What’s behind the curtain? Part I
    - Vectors
    - PKI: Looking at the Risks
    - A Quick Look at Cross Site Scripting
    - PKI Architectures: How to Choose One
    - Trust, Access Control, and Rights for Web Se...
    - Basic Concepts of Web Services Security
    - Safeguarding the Identity and Integrity of X...

     
    Accelerating Trading Partner Performance
     
    Competing on Analytics
     
    Cost Effective Scaling with Virtualization and Coyote Point Systems
     
    Five Checkpoints to Implementing IP Telephony
     
    Hosted Email Security: Staying Ahead of New Threats
     




    © 2003-2008 by Developer Shed. All rights reserved. DS Cluster 2 hosted by Hostway