01-09-2014, 02:02 PM
Since I released the cms I have myself witnessed the harm it has done. I only released it due to other people buying an selling it or using it an editing an re-selling as their work.
Now the code is public has brought new dickheads that think its great to download the cms just to make tools to manipulate other peoples database
(Spam accounts)Simple Howto guide:
Best way to stop this is to change things to protect your site & database, I have done this with my custom LC-CMS 3.6 which I will never release to anyone.
But you can achieve the same thing as me by learning from this guide.
LC-CMS 3.6.1:
Open "config/config.php" scroll to the bottom an you will find the PDO connector
// Added Security Option
$LC_Host = $LCSET[cms_host];
$LC_User = $LCSET[cms_username];
$LC_Pass = $LCSET[cms_password];
$LC_Auth = $LCSET[cms_lc_auth];
$LC_Db = $LCSET[cms_lc_db];
$LC_Data = $LCSET[cms_lc_data];
$LC_Act = $LCSET[cms_lc_authORdb];
$LC_CMSDb = $LCSET[cms_lc_site];
// PDO Connector
$pdo_cms = sprintf("mysql:host=%s", $LC_Host );
// PDO Test Connection
try { $con_cms_pdo = new PDO( $pdo_cms,$LC_User,$LC_Pass ); }
catch(PDOException $e) {die(<title>CONFIG ERROR</title><body text="#C0C0C0" bgcolor="#000000"><center><img src="styles/Metal/images/error.png" border="0"><br/><font color=red size=4>Error connecting to the Mysql server</font><br/>If your the admin please check your config settings.<br/>If your not then there is no connection to Mysql sorry, come back later.<br/><br/><br/>-LC-CMS By ToXiC L33T-</body>
;} Here you can rename all "$LC_whatever" to new values an also change "$con_cms_pdo".
Now open all the cms php files in ALL folders an search an replace what you changed.
search "$LC_Host" an replace with your new.
Doing this will disable these crappy account spammers, Happy Days!
