Ultramode.txt writable to hackers

Regular Joined: Oct 17, 2005 Posts: 51

Lately I been seeing a lot of defacements come throug zone-h where hackers are writing to ulramode.txt I have seen big nuke sites such as phpnukefiles and a few other. This presents a SERIOUS security risk as isomeone could make a shell of it I have deleted my ultramode and advised everyone else to do so as well. I have seen over 200 defacements from this in the past 3 days. This is not a false alert

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

You are treating the symptom, not the cause. If they are able to write to that file, they could write to several others also. You need to figure out what's allowing them to write to it. Also try 664 instead of 666 and see if that works as a stop gap.

Regular Joined: Feb 18, 2008 Posts: 94

when they ask on prefrences activate Ultramode...

what is it.

and should i activate it?

registered · Posted: Thu Feb 28, 2008 7:07 am

Personally? I wish we would remove that feature altogether. I leave mine off as well as I have stripped the link from the footer.

Posted: Thu Feb 28, 2008 10:38 am

I agree and we will Smile

- maybe even for 2.20.01. It is very antiquated now and of no use. Montego, I will submit a Mantis issue on it although it seems we may have one in the archives. In any event we'll take care of it.