your elgg got hacked?

The question is HOW did you get hacked?  Was elgg the attack vector?
It could also be the server itself was compromised, or some other software on the server was hacked which allowed access.

I'm sorry your site was hacked, but please don't post inflammatory "Security is very low" posts unless you're sure elgg was the attack vector.  If however you do discover an attack vector in elgg please report it to security@elgg.org

Yes, my site was hacked, but now I was able to fix

And I do not know how to increase site security!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Hacker working on site :

http://www.zone-h.org/archive

They are very strong

security failures are increasing in general online recently as we all learn about the weaknesses of the systems and more exploits are identified. i am thankful i am here thinking about encryption instead of being bombed in syria.

issues of life and death aside.

possible changes to explore are (some of these only apply if you have root access to your webserver):

• the hosting company: some of the biggest have shared that they have been hacked recently. ensure your hosting company is notified and works with you to resolve the issue.
• change all your server passwords - including logins, database and elgg passwords.
• secure your local network and pc - change your home pc passwords & phones etc.
• use passwords that are long and easy for you to remember but tougher for machines to calculate.
• check that your connection to your server is encrypted using a strong encryption algorithm (not rsa).
• check the configuration of your webserver application to ensure it is hardened.
• generally read walkthroughs about firewall and other types of security hardening for your server's os.
• make peace with every human so they stop bugging you.. technically possible, will maybe take a while to achieve.. the only real security!

thank you for Guidance

how to protect elgg against spam and robot registration ?

Sorry to hear that. Do you have another CMS on your site? Like Wordpress or Joomla?

Rodolfo Hernandez

Arvixe/Elgg Community Liaison

@ masoud, sorry for the loss. @ krismb, I have been busy for weeks but I am working on a plugin that will help stop robots registerations to ellg sites. One of the example that you can use to stop zombies hammering your site:  http://community.elgg.org/plugins/1488356/1.8.15D/elgg-hammer

@  krismb , I have used these four plugins and I can assure you, my spam issues have become a thing of the past. However, I do normally delete one or two spammers once in a while.