[egorka2]

Hi! Somewhere 2 weeks ago noticed that my sourcebans, there were new admins. I deleted them, then appeared again. It later emerged that dude just a couple of minutes breaks my password on admin and add new admin quietly. And by the logs, modify the data and it can unlock players as Guest.

Naturally passwords are very complex, changing after every break, external access to the database is closed, the 1.4.11 version costs with the latest LFI Fix. None of this helps! As soon as he wants to, he immediately gets my password and goes through my account!

Hacker's steamid - STEAM_0:0:71645076



77.232.152.119 - - [24/Dec/2014:18:03:21 +0300] "GET /index.php?p=home HTTP/1.0" 200 36446
77.232.152.119 - - [24/Dec/2014:18:03:22 +0300] "GET /themes/sourcebans_dark/css/css.php HTTP/1.0" 200 22931
77.232.152.119 - - [24/Dec/2014:18:03:22 +0300] "POST /index.php HTTP/1.0" 200 136
77.232.152.119 - - [24/Dec/2014:18:03:22 +0300] "POST /index.php HTTP/1.0" 200 141
77.232.152.119 - - [24/Dec/2014:18:03:22 +0300] "POST /index.php HTTP/1.0" 200 136
77.232.152.119 - - [24/Dec/2014:18:03:22 +0300] "POST /index.php HTTP/1.0" 200 141
77.232.152.119 - - [24/Dec/2014:18:03:23 +0300] "POST /index.php HTTP/1.0" 200 141
77.232.152.119 - - [24/Dec/2014:18:03:23 +0300] "POST /index.php HTTP/1.0" 200 136
77.232.152.119 - - [24/Dec/2014:18:03:23 +0300] "POST /index.php HTTP/1.0" 200 141
77.232.152.119 - - [24/Dec/2014:18:03:23 +0300] "POST /index.php HTTP/1.0" 200 136
77.232.152.119 - - [24/Dec/2014:18:03:23 +0300] "POST /index.php HTTP/1.0" 200 536
77.232.152.119 - - [24/Dec/2014:18:03:23 +0300] "POST /index.php HTTP/1.0" 200 141
77.232.152.119 - - [24/Dec/2014:18:03:23 +0300] "POST /index.php HTTP/1.0" 200 533
77.232.152.119 - - [24/Dec/2014:18:03:23 +0300] "POST /index.php HTTP/1.0" 200 141
77.232.152.119 - - [24/Dec/2014:18:03:24 +0300] "GET /index.php?p=admin&c=admins HTTP/1.0" 200 104610
77.232.152.119 - - [24/Dec/2014:18:03:25 +0300] "GET /themes/sourcebans_dark/css/css.php HTTP/1.0" 200 22931
77.232.152.119 - - [24/Dec/2014:18:03:25 +0300] "POST /index.php HTTP/1.0" 200 134
77.232.152.119 - - [24/Dec/2014:18:03:25 +0300] "POST /index.php HTTP/1.0" 200 139
77.232.152.119 - - [24/Dec/2014:18:03:25 +0300] "POST /index.php HTTP/1.0" 200 134
77.232.152.119 - - [24/Dec/2014:18:03:25 +0300] "POST /index.php HTTP/1.0" 200 139