Few days ago one user send me a message that forum has security hole, so he will tell me what if I do something for him. I just ignore him, but jesterday he was able to change my avatar. After changing he sent me new message telling me it is only start. I also noted that he was trying to log in to ACP two times and for username first time he put email I am using for forum and second time database user name, so he have that information.
I realy don't know what to do. Upgrading to 3.8.6 is not solution because it dosen't have any fixes related to security that kind.
__DEFINE_LIKE_SHARE__
|