Fewer hackings of PHP-Nuke?

Worker Joined: Aug 26, 2007 Posts: 236

My impression is from my own site and the postings in various PHP-Nuke forums, that today people are not hacked as often as a couple of years ago.
Is PHP-Nuke not used as much as before, have protection of the sites increased or have the hackers turned to Joomla or other CMS?

Posted: Wed Sep 10, 2008 6:49 am

First there is no definitive answer. Why it looks like PHP Nuke is not hacked as often like in the past simple because people just have learned to patch there sites after install, are more sensitive due to the fact you can read everywhere more about how to protect your site and what software of Nuke you should use and wich not.
Between PHP 4 and 5 is also a difference.

NukeSentinel is often integrated within different CMS and this also a reason.
Last but not least many don´t run a Php Nuke site anymore they switched over to blogsoftware like Wordpress. I´m not saying that this would be a real problem for a professional hacker but maybe for the majority of script kiddies.

I personally don´t get the same attacks I had in Nuke 6.5 (admin styles etc.) anymore but a few weeks ago was a new security hole published and within 3 days or so they started with these attacks on my own site also.

Beneed this to hack a site just to place a banner there is for the most not interesting and not profitable.
What counts is to make money with spam, stolen credit card numbers, and to sell stolen addresses etc. and the Zombie PCs are also a thing to consider. My list is longer but I´m lazy to write in english. Smile

Posted: Wed Sep 10, 2008 9:47 am

I still hear about hacking... it's those site owners that haven't kept up with the patches and Sentinel that come running to us after they are hacked. Sadly many people just use the default Fantastico or other installation, without checking to see whether their software needs updates.

I would say most hacking now is automated, with any vulnerability starting a 0-day attack. There is more hacking, but often they are old vulnerabilities.