Dynadot Aftermarket: discover domain gems worth investing in. Visit our aftermarket.

Stealing passwords phpbb - A fix

SpaceshipSpaceship
Namecheap AuctionsNamecheap Auctions
Namecheap AuctionsNamecheap Auctions
Watch

zaros64

VIP Member
Impact
34
what some people do is make a flash document, code it so when its opened it opens a new window..
the put in it their signature so when it opens a new window the copy the skin of the forum and say you have to login
User name:
Pass word:
when you type it in it emails them your password :(

how to keep your forum safe..
disable flash in signatures and in posts :D
 
0
Close
The views expressed on this page by users and staff are their own, not those of NamePros.
GoDaddyGoDaddy
Can you go a little more in depth, maybe an example?

-Steve
 
0
Close
What they do is have a sig that takes you (unknowingly) to a false page, that is actually out to steal your password. What they make you do is log-in to *that* instead of the safe and original phpBB
 
0
Close
stscac said:
Can you go a little more in depth, maybe an example?

-Steve
someone signs up.. downloads your layout then edits it to a page that says username and password in a form... but they host it on their own server(secretly that file doesn't log you in it steals your password).. then they make a flash document whichs opens that page in a new window, so everyone will be like.. hey ... then they get everyones password etc,etc
 
0
Close
Yeah, sounds like a poor phishing attempt to me :td:

-Steve
 
0
Close
stscac said:
Yeah, sounds like a poor phishing attempt to me :td:

-Steve


Pretty much :hehe:

But people fall for it.

iNod
 
0
Close
:(

Yep. They sure do. Look at those ebay scams :td:

-Steve
 
0
Close
All that will be enough by securing Https and SSL.
 
0
Close
dongan said:
All that will be enough by securing Https and SSL.
whos gunna put a security certificate on a forum though.. best to disable flash on your forum.. its as simple as that
 
0
Close
majinbuu1023 said:
whos gunna put a security certificate on a forum though.. best to disable flash on your forum.. its as simple as that

might be true.
 
0
Close
DomainEasy: white label portfolios are live. Enable yours.

We're social

Escrow.com
Spaceship
Domain Recover
CryptoExchange.com

NamePros updates

A browser tab with a favicon next to the page title
Search members
You can now search for members by name, company, location and more. Open the search at the top of any page and choose Members. You will...
AIVikings
Catchy
  • The sidebar remains visible by scrolling at a speed relative to the page’s height.
Back