Site got hacked 6th times, how to protect your site?

[cheapez]

My site http://searchwebsitehosting.com got hacked, hackers logged into the account and deleted everythings, total 6 times. As you click on that url, you will see a blank page and I'm not going to updoad the backup again or rebuild the site until it is secured

I do have their Ip addresses for sure, know exjactly when they did that "hacked" mysite. The fist time was a group of hackers and I went to their own hacking forums. These hackers found out a hole in "PHPNUKE" (Phpnuke is a popular site, a nice software, nice templates) that allow them to login as admin or create a new godadmin. This is an old way to hack phpnuke, but I didn't fixed the site before they did that

The 2nd,3th,4th,5th,6th could not be hacked by these hackers group, but they could be members from freewebspace.net, they had difference ip addresses also. I don't know how they deleted mysite so easy, because I installed "phpbb" instead of "phpnuke" then vbulletin, then just a .html page with some texts, they still got in and deleted everythings
I know it could be that, they used Netcat, DOS to attacked the site or got in through Sql, config.php........ect

I post this message to warn webmasters, and so be prepare for them
It is so said that I spend hours to worked on the site and they deleted all in 1 min, the bad thing is that they keep doing that. I wish some one can stop them and end them up in jail
Sometimes I thought about it and I just want to punch them in the face, don't know what was they thinking and how stupid they are

You see the site with a blank page right now, but it is running, it is a .html with no texts that keep the site from hacked the 7th time

If any have some good tutorials of how to secured the site, please post them here. I already tried to secure the site by installed "mod secure", password protect and more but that are not enough


Thanks for reading

--------
Cheapez

[Brandon]

If you make periodic ful site backups it shouldent be hard to restore all your files. And the hackers IP will do you no good as they were using proxies most likely.

I don't think your giving us enough information on how the site was setup and what software it was using when it got hacked.

[inspiration100]

Have you thought about contacting phpnuke about this? They usually try to keep updates to update your site from current threats. Sorry to hear this, that really does stink.

[cheapez]

I'm not going to catch them with those ip addresses, because I know they are not stupid to browse the webs with their real ips
It will take me 30 mins to restore the old site phpnuke, but for what? theywill just delete it again

I'm sure the softwares are fine (phpnuke, phpbb, vbulletin,...ect). phpnuke has some holes but I know how to fix them

I'm using Cpanel
Operating system Linux
Apache version 1.X.XX (Unix)
Perl version 5.x.x
Php version 5.x.x
MySQL version 4.x.xx-standard

I should had hid those imformations before they found out
There are some "mod secure" you guy should install them on the server
right now i dont have times and don't know how to install them

Cheapez

[Saint Sin]

I've heard a lot of problems with hacking phpnuke... Try another CMS, if that doesn't work I have no idea

[inspiration100]

So they have no updates on the website? Seems like if you got hacked 6 times its a pretty common bug. Again, i'd check around to see if they have a patch to fix this.

[Nigel Lew]

phpnuke is the most hacked app on the web. If your site is at all visible, you will have problems with it.

Nigel

[Gareth_Boyd]

I usually have my password set as something crazy like: I9ee2-07

[M Nabil]

Yeah I had a site that was hacked twice until I changed my Cpanel password to a very long and complicated one like this jf%#nu%nnhy*@ggg

[Gareth_Boyd]

Haha my friend made his password so complicated he forgot it and he couldn't remember where he put it and his cPanel doesn't have his email in it.

[M Nabil]

I'm keeping the password on my PC, I hope the drive does not fail

[Miss Miaow]

Originally Posted by Gareth_Boyd

Haha my friend made his password so complicated he forgot it and he couldn't remember where he put it and his cPanel doesn't have his email in it.

What happened?

I don't have a popular website so I don't think anyone would be interested in hacking.

[M Nabil]

It doesn't have to be popular to get hacked, my site which got hacked is just a new unknown site.