Banana Man Posted March 23, 2010 Share Posted March 23, 2010 Hi, My site was hacked a few days ago and i have since installed a good few security mods to help prevent it again in the future. I was wondering though if their are other things i should be concered about i.e. customer passwords on my site. Is their a way of updating everyones password and sending them out an email explaining what happened? Thanks Link to comment Share on other sites More sharing options...
Mort-lemur Posted March 23, 2010 Share Posted March 23, 2010 Hi, My site was hacked a few days ago and i have since installed a good few security mods to help prevent it again in the future. I was wondering though if their are other things i should be concered about i.e. customer passwords on my site. Is their a way of updating everyones password and sending them out an email explaining what happened? Thanks This contribution HERE Then email them via admin. Thanks Now running on a fully modded, Mobile Friendly 2.3.4 Store with the Excellent MTS installed - See my profile for the mods installed ..... So much thanks for all the help given along the way by forum members. Link to comment Share on other sites More sharing options...
♥mdtaylorlrim Posted March 23, 2010 Share Posted March 23, 2010 Hi, My site was hacked a few days ago and i have since installed a good few security mods to help prevent it again in the future. I was wondering though if their are other things i should be concered about i.e. customer passwords on my site. Is their a way of updating everyones password and sending them out an email explaining what happened? Thanks There is no need to reset everyone's password. The passwords are encrypted and are not even readable by the server administrators. The only way the accounts could have been compromised is if the hackers changed the email addresses and had new passwords sent to them at their hacker address. Quite unlikely. If they wanted the customer details all they had to do was to take it one step further and download the entire database. They are not going to fool with single accounts. What do you think they would do? Buy something? Community Bootstrap Edition, Edge Avoid the most asked question. See How to Secure My Site and How do I...? Link to comment Share on other sites More sharing options...
Banana Man Posted March 23, 2010 Author Share Posted March 23, 2010 There is no need to reset everyone's password. The passwords are encrypted and are not even readable by the server administrators. The only way the accounts could have been compromised is if the hackers changed the email addresses and had new passwords sent to them at their hacker address. Quite unlikely. If they wanted the customer details all they had to do was to take it one step further and download the entire database. They are not going to fool with single accounts. What do you think they would do? Buy something? From what i know its fairly easy to unencrypt a hashed password. They could then be used to try and access other websites where the customers have used the same email and password login details. Link to comment Share on other sites More sharing options...
♥mdtaylorlrim Posted March 23, 2010 Share Posted March 23, 2010 From what i know its fairly easy to unencrypt a hashed password. They could then be used to try and access other websites where the customers have used the same email and password login details. But there is a 'salt' added to the password during encryption. Makes decrypting it much more difficult. Community Bootstrap Edition, Edge Avoid the most asked question. See How to Secure My Site and How do I...? Link to comment Share on other sites More sharing options...
Banana Man Posted March 23, 2010 Author Share Posted March 23, 2010 But there is a 'salt' added to the password during encryption. Makes decrypting it much more difficult. Thanks, that puts my mind at rest. All recovered now then after the attack :) Link to comment Share on other sites More sharing options...
New 
Recommended Posts
Archived
This topic is now archived and is closed to further replies.