Crackers get hold of your passwords by gaining access to email via the security question,
or by guessing the password of an admin or gmod, or running a scanner to do the same.
Follow these guidelines :-
1. Ensure your email password security question is not obvious (don't have 'my favourite football team' then go talking about them non stop)
2. You may want to change your email address / provider (the cracker may still have access to the old one)
3. Use the 'Hide email' option (if you want members to contact you, use one of the free 'throwaway' emails for public view)
4. Make ANY passwords difficult (use upper and lower case letters, mixed with numbers)
5. Use different passwords for each account.
6. Use different email for your main Admin account(s), and don't make it public.
7. Don't let ANYONE know your passwords (if you make a note of them, keep them safe)
8. If you share a computer/ computer account, don't 'let the computer remember password'
9. Tell your main staff to do the same (2nd Admin, and G Mods)
10. Don't open links in PM's, unless you know EXACTLY what it is.
=========================
You may copy the above guidelines for use on ANY Proboard site, in PM's or posts.
You may also link to us, Mini banners are available
There is a Random Password Generator HERE (courtesy of Frufru)
Extra rule for Main Admin :- Be careful who you promote to GMod, or 2nd Admin, and restrict powers.
(do not give powers that affect the board settings)
Hello I recently had to ban a couple members for not following the rules set forth on the forum.
After doing so , My two Moderators were banned, two more mmembers also got banned and today another good standing member also got banned. Whats up with this , ? Has my forum been hacked by one of the disgrunted Xmembers I banned . so far nothing else seems out of place other than the 3 good members and my two Mod's being banned.
Thankyou in advance
Rooster
Apologies for delay in replying.
Normally an issue like this occurs when two members or more are with an ISP which has "shared IPs". What happens is that the company purchases a range of IP addresses, and these IP addresses are shared between their users, sometimes changing on a page-to-page basis - the same person can view six pages one after another and have used 4 different IP addresses. Unfortunately, this means when you ban someone via IP address on your site, you're probably unintentionally temporarily banning innocent people, simply because of the changing IP addresses. AOL users are greatly affected by this, as AOL is a company well known to use IP sharing. The risk is increased if you're using wildcard bans, as it affects a range of IPs rater than just individual IPs. Also be aware, if you and your members are accessing your site from a public place, eg: school, library, internet cafe, etc, you can accidentally ban yourself if you access the site from a pulic location in your ban list.
I'd suggest removing your IP bans from your site, and relying for a while on email bans and username bans. You can also disable members accounts from inside their profiles.
In future, I need to ask that you post your Support-related questions in the ProBoards Support board. Not only will this get around such delays, but SafetyNet is not a ProBoards Support site. Thank you.
Um, yeah. So I posted on proboards support and they restored my site, but in doing so said this:
Quote:
The board has been restored
You will need to request a password reminder to obtain the new password i have set for the admin account. I would also like you to read the information on thje following site, and update your passwords and security measures on your online accounts (not just ProBoards) accordingly:
I would also recommend never sharing an account with someone.
So what am I supposed to do? If I wasn't supposed to post here, SORRY. T.T
I'm just a little stressed about getting a password?
Apologies for delay in replying.
If you haven't regained your password as of now, when you go to log in, on the right side of the login box, "Forgotten password?" You will be prompted to enter either your username or your email address to recover your password, which will be sent to the email address on file.
If you have regained your password and need to change it, please view this thread: http://safetynet.proboards.com/index.cgi?board=general&action=display&thread=3 A password generator is linked from that thread. I strongly recommend using the "Complicated" setting, with no less than 8 characters. Be sure you can remember the password. To change the password on your account profile, go to Profile >> Modify Profile >> at the top are two text boxes. Type in the new password in both boxes, and save your profile. Log out then log back in (using the new password), and your new password is working.
In future, I need to ask that you post your Support-related questions in the ProBoards Support board. Not only will this get around such delays, but SafetyNet is not a ProBoards Support site. Thank you.
Members banned Not by me ... « Result #7 on Jun 27, 2009, 4:58pm »
Hello I recently had to ban a couple members for not following the rules set forth on the forum.
After doing so , My two Moderators were banned, two more mmembers also got banned and today another good standing member also got banned. Whats up with this , ? Has my forum been hacked by one of the disgrunted Xmembers I banned . so far nothing else seems out of place other than the 3 good members and my two Mod's being banned.
Proboards Admin Password Reminder Thing « Result #8 on Jun 26, 2009, 9:44pm »
Um, yeah. So I posted on proboards support and they restored my site, but in doing so said this:
Quote:
The board has been restored
You will need to request a password reminder to obtain the new password i have set for the admin account. I would also like you to read the information on thje following site, and update your passwords and security measures on your online accounts (not just ProBoards) accordingly:
Joined: Jul 2004 Gender: Male Posts: 84 Location: Oxfordshire UK
Removal of ability to change Emails « Result #9 on May 4, 2009, 3:26pm »
Although this had the purpose of being able to let a member access their profile if their email client no longer worked, or accessible, this option was abused by the minority of admins to get aroound the password changing, again it was used for reading members PM's.
For those that still need a method to allow the member access to their account due to email problems, the only way is for an admin (or staff with access) to delete the members profile, and let them re-register the same username. This method will NOT allow the member (or anyone else) to have access to their old PM's, but will associate the member with their old posts. Things like poscount can be updated in the members profile by staff with access to modify a profile, so a note should be taken before deletion
Special Thanks to Zero for volunteering his time in making the userbars and logos above, and all the new minibanners.
Please visit his site by clicking the banner below if you want some great graphics made
![[Home]](http://s4.images.proboards.com/menu/home.gif)
![[Help]](http://s4.images.proboards.com/menu/help.gif)
![[Search]](http://s4.images.proboards.com/menu/search.gif)
![[Login]](http://s4.images.proboards.com/menu/login.gif)
![[Register]](http://s4.images.proboards.com/menu/register.gif)
![[Search This Thread]](http://s4.images.proboards.com/search2.gif)
![[Reply]](http://s4.images.proboards.com/buttons/reply.gif)
![[Send Topic To Friend]](http://s4.images.proboards.com/buttons/sendtopic.gif)
![[Print]](http://s4.images.proboards.com/buttons/print.gif)
Author
![[Quote]](http://s4.images.proboards.com/buttons/quote.gif)
Logged
Author
Author
![[avatar]](http://img.photobucket.com/albums/v232/CaptainNiobe/SigsAvatars/CaptainNiobe-Avatar.jpg){kind=avatar}
![[homepage]](http://s4.images.proboards.com/buttons/www_sm.gif)
![[image]](http://img.photobucket.com/albums/v232/CaptainNiobe/CaptainNiobesig3.jpg)
![[avatar]](http://www.allseeingeyes.info/sn/me2007.jpg)
