[urgent help needed] I seriously need help with retro security..

[j0sh]

I own hotelhab.com and it would be great if someone could help me fix exploits, etc.
It always gets hacked and it is seriously sucking the fun out of habbo retros.. Can someone give us a hand?
Edit:
•one person hacked us and deleted our users table from the database
•i could probably pay you but idk how much.. I spent a lot of money on this

 

[Wickd]

Your site is off,but i think you're using revcms right?

 

[j0sh]

Yes. I am switch to aura theme as reccomended. I don't really like it tho.. Do you know a really good theme?

 

[Wickd]

LMFAO Search for them there are tons,use revcms 1.9.9.9

 

[Crup]

Get a proxy to prevent your hotel from being ddos. If you're using xampp, delete webdav but you should rather use iis.. revcms is secured so I'll recommend it.

 

[j0sh]

Already have a proxy. I used revcms but we still got hacked

 

[j0sh]

And we are using bitnami stack

 

[Data]

The exploit people use are either with a profile page using motto field or the forgot password system filling the post in with a c# application to reset a users password.
Or you could even try change your VPS password, I don't know what it could be but the forgot password is the most used exploit in the last 2 weeks.

 

[Pocket]

@Data how would i fix those exploits?

 

[j0sh]

@Data Can you tell me how to fix those exploits?

 

[Data]

- Profile page one delete the page, use the 'account' page in habbo theme by default.
- Look on a rival forum for the forgot pw exploit fix.