Advise on updates & patches

scorpious · Posted: Mon Jul 24, 2006 6:30 am

We have reinstalled RavenNuke76 v2.02.02 because we had our website hacked. What updates/upgrades do we need to apply.

Is it best to install Ravens Script To Confront Hackers into RavenNuke76.

Any advise on how to make Raven76 more secure would be appreciated.

Why is there a member called Anonymous automatically created, is this to do with the admin ???

Many thanks

Scorpious

fkelly · Posted: Mon Jul 24, 2006 7:58 am

Ravennuke is already pretty secure and most of the latest patches are incorporated in it. You could upgrade to Sentinel 2.5.0 which can be found at Nukescripts.net.

The anonymous thing is just the way Nuke has always worked I believe. I think the way it works is that when someone comes in to your site as a guest without signing in they get treated as the "anonymous" user. Nothing to be concerned about.

I'd recommend that you focus on how you got hacked in the first place and make sure that path is closed off as well as possible. For instance, if you can identify where the hack came from you could use Sentinel to ban the country or countries involved. Or if you have "third party" modules that have vulnerabilities you could patch or eliminate those.

kguske · Site Admin Joined: Jun 04, 2004 Posts: 6044

...and make sure you use Admin authentication on your admin.php file and the modules/Forums/admin directory.

Misha · Posted: Mon Aug 07, 2006 8:17 am

Does it make sence to upgrade to most recent Sentinel now? Or waiting for new RavenNuke release would be better?
Thanks, Misha

gregexp · Posted: Mon Aug 07, 2006 9:25 am

I would always sudjest to wait because of the standards held by raven and his team are high and they dont release till it works completely but if you feel brave back it all up and give it a shot step by step.

Not sure when ravennuke will be up for the latest release, I hear they are working on some very nice additions.

Misha · Posted: Mon Aug 07, 2006 9:35 am

Thanks, then I'll wait probably ...

montego · Posted: Tue Aug 08, 2006 1:21 pm

Actually, I would have to differ a bit when it comes to NukeSentinel. I would not wait to upgrade. In fact, I'd keep as current as I could... Wink

JMO.

gregexp · Posted: Tue Aug 08, 2006 5:56 pm

I only stated that due to possible conflicts with raven nuke and 2.5, Not sure if there would be any. Due to this question, I am currently running tests to see if any conflicts arrize.

Misha · Posted: Tue Aug 08, 2006 6:05 pm

Eagerly waiting for the results Smile

Thanks, Misha