Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

Gave out his Host CP password, could his website get hacked now?

  • 27-05-2012 2:50pm
    #1
    Banned (with Prison Access) Posts: 85 ✭✭


    My younger brother didn't really know the dangers of doing what he did i think. Basically he registered a few domain names and got hosting with HostGator. So he was online and someone added his MSN and through instant messages offered to help, so after a few days of small chat with this other "person" giving him tips he offered to set up the site but needed his Host control panel details so stupidly enough he sent him the Log-in http, the CP username and the CP password.

    Then after a few minutes this guy wrote back "Thanks, i'm just installing software now to hack your account when ever i need to, bye" and just went off.


    Is this possible that no matter if he changes the password that this guy is "in" or latched to the server and nothing can be done?

    Would it be very very risky to turn a domain on that hosting account into an eCommerce site now?

    Thank you.


Comments

  • Moderators, Technology & Internet Moderators Posts: 11,017 Mod ✭✭✭✭yoyo


    ByronB wrote: »
    My younger brother didn't really know the dangers of doing what he did i think. Basically he registered a few domain names and got hosting with HostGator. So he was online and someone added his MSN and through instant messages offered to help, so after a few days of small chat with this other "person" giving him tips he offered to set up the site but needed his Host control panel details so stupidly enough he sent him the Log-in http, the CP username and the CP password.

    Then after a few minutes this guy wrote back "Thanks, i'm just installing software now to hack your account when ever i need to, bye" and just went off.


    Is this possible that no matter if he changes the password that this guy is "in" or latched to the server and nothing can be done?

    Would it be very very risky to turn a domain on that hosting account into an eCommerce site now?

    Thank you.
    You should contact the web host informing them, they should have access logs which should show what the "hacker" done, I'm guessing he added some kinda data to the script files/db. They may also have the capability to restore a previous version of the site prior to the intrusion

    Nick


  • Registered Users, Registered Users 2 Posts: 37,315 ✭✭✭✭the_syco


    ByronB wrote: »
    Would it be very very risky to turn a domain on that hosting account into an eCommerce site now?
    Knowing that someone has installed malicious software, it'd be fairly stupid to do so. As said, get the site rolled back to a previous version, or get it rest to "as new" and start with a fresh slate, as you never know what was installed.


Advertisement