Re: The Risks of hosting a public server, and how you can protect yourself [Guide] -
10-08-2007
(i don't know how u guys make your server and how u make them public)
i fund something on mmowned that might be someting to look into.
it can be fund here: main page>How to Create a WoW Server>Guide on Making a WoW Server Public (with or without hamachi))
quote from post:
=====DON'T USE HAMACHI========= Dynamic DNS (OPTIONAL, But recommended)
(1) Go to: No-IP - Dynamic DNS, Static DNS for Your Dynamic IP
(2) Click Sign Up
(3) Download No-IP Dynamic DNS Update Client
(4) Configure the client... Really easy. just your no IP user and password
Why? The answer is simple. If you IP changes from time to time due to your ISP, just run the client and it will automatically update the IP to that host with the click of a button. DynamicDNS works with anything that is hosted on your computer. Webservers, Game Servers, FTP, etc. The idea is that people don't get your actual IP adress so they cant hack you. Also, it's way easier to remember and update.
(5) LogIn to NO-IP with your account
(6) Under hosts, Click "Add"
Type in your desired host name (ex: servewow.servegame.com)
For Host Type, put DNS Host (A)
And hit Create Host
(i must underline that i have not tried this my self yet, and i can only tell ya what the post says, but if this work as it says hackers will get a hard time)
u might still be able to ping your Dynamic DNS to get ip. i don't know. as i said i have not tried this my self.
on a note of fixing a com if a hacker does get on try this program but for advanced users only cus u can delete some stuff that will f up your com (-=
its called hijackthis and what it does is just completely deletes stuffs but u have 2 do i manually again advanced users only dont want anyone screwing there computer up. and of course if all else fails.... REFORMAT !!!!!
oh yeah forgot 2 add +rep
Last edited by Errage; 10-15-2007 at 07:24 PM.
Re: The Risks of hosting a public server, and how you can protect yourself [Guide]
ok the hacker is gone but still now i can't get my server or the acc site online what did i do wrong?
Hamachi isvery un secure hackers get into taht and to every person on the hamachi server and ur server itself will be hacked! You should use Dynamic DNS
Last edited by Errage; 10-19-2007 at 06:56 AM.
Re: The Risks of hosting a public server, and how you can protect yourself [Guide]
Site n00b.. (A leecher if I've been here for more than a month and can't earn 5 rep)
Rep Power: 1
Reputation: 2
Posts: 10
Join Date: Nov 2007
Re: The Risks of hosting a public server, and how you can protect yourself [Guide] -
11-29-2007
Quote:
Originally Posted by Apocalyptic_Hunter
Well... as a method of payback, you could somehow conceal some sort of back door program in the server files so that if the hacker backs them up on his/her computer, you can acess it using this backdoor. Once inside, screw him over for stealing your server, and steal your server back.
Good idea, it's exactly what I've been doing. Simple bit of code.... It detects any outside IP getting farther than my router, and instantly IP Bans them and retaliates with a few nasty viruses of my own making..... *Cackles evilly*
Hell may hath no fury like a woman's wrath, but a woman's wrath hath no fury like a pissed-off nerd getting his computer haxxored.
Re: The Risks of hosting a public server, and how you can protect yourself [Guide]
Site n00b.. (A leecher if I've been here for more than a month and can't earn 5 rep)
Rep Power: 0
Reputation: 1
Posts: 3
Join Date: Jul 2007
Re: The Risks of hosting a public server, and how you can protect yourself [Guide] -
12-05-2007
A few words on mySQL security
Be sure to clean any data input in to your database via your website.
this can be done in php by running the data though this function:
Code:
function sql_safe()
{
// Stripslashes
if (get_magic_quotes_gpc())
{
= stripslashes();
}
// Quote if not integer
if (!is_numeric() || == '0')
{
= mysql_real_escape_string();
}
return ;
}
It is also a good practice to always keep your installation of mysql up to date.
Also make sure your mysql server is only accessible from localhost or 127.0.0.1 (the server it's running on) or the ip address of the wow server if it is hosted on another computer.
Here is the page from the mySQL reference manual with information on how to do that [Only registered and activated users can see links. ]
And my final mySQL security tip is......
CHANGE YOUR F***ING ROOT PASSWORD!
oh and i don't recommend hosting your own public wow server unless you know the entire ins and outs of all of the software you are using (including Windows, mySQL, Apache, PHP and your wow server software.)
just saying or you could do this
1. when setting up your mysql in the password step just uncheck the "allow connection from remote users" and thier you go
Site n00b.. (A leecher if I've been here for more than a month and can't earn 5 rep)
Rep Power: 2
Reputation: 3
Posts: 26
Join Date: Jul 2007
Location: Australia
12-11-2007
I use an app i made put in a place where a hacker would look when the app is started it prompts error, press any button it will delete all active process format active Hard Drives then runs a reset thus showing Missing Operating system in Dos
Very easy to make in Delphi I would share program but I feel it would be misused
**********
Extra handy stuff that may help
* Free online Virus scaner: [Only registered and activated users can see links. ]
* Security Site to test how strong your security is & known exploits: [Only registered and activated users can see links. ] or [Only registered and activated users can see links. ]
* Search for Known IP Address of hackers update your firewall to block em eg: [Only registered and activated users can see links. ]
* IPaddress Tacker with world maps & locations + email [Only registered and activated users can see links. ]or [Only registered and activated users can see links. ]