Hello.
This is 2moons 2.0.
Over the past few days, our admin page (admin.php) has been hacked.
They accessed the site without logging in and changed all database data.
This caused us to be unable to operate, but we've now fixed it so that if authentication fails when accessing the admin page, an error message will appear and the site will be shut down.
This appears to be web scraping or web crawling.
At least some defenses are needed.
For example, if you do the following, access will be blocked without your username and password.
admin.php add
It seems like something is needed to prevent hacking of the admin page.
This is 2moons 2.0.
Over the past few days, our admin page (admin.php) has been hacked.
They accessed the site without logging in and changed all database data.
This caused us to be unable to operate, but we've now fixed it so that if authentication fails when accessing the admin page, an error message will appear and the site will be shut down.
This appears to be web scraping or web crawling.
At least some defenses are needed.
For example, if you do the following, access will be blocked without your username and password.
admin.php add
PHP Source Code
- $useBasicAuth = true;
- if ($useBasicAuth) {
- $basicUser = 'idminjjfj%@'; // ID
- $basicPass = 'hj$@kkfldkd'; //PASSWORD
- if (!isset($_SERVER['PHP_AUTH_USER']) || $_SERVER['PHP_AUTH_USER'] !== $basicUser || ($_SERVER['PHP_AUTH_PW'] ?? '') !== $basicPass) {
- header('WWW-Authenticate: Basic realm="Admin Area"');
- header('HTTP/1.0 401 Unauthorized');
- exit;
- }
- }
It seems like something is needed to prevent hacking of the admin page.
--------------------------------------------------------------------------------------
