Hacked site

[SHRED]

http://sandiegotalks.com

I enjoyed this discussion group but it has been hacked.

Geek questions:

Since no registration is required to post, does that make a site more venerable?
What steps can I suggest to the proprietor to safeguard it?

[brainshrub]

1. Someone tried to hack my site about 3 days ago.

I was able to stop it because I use Drupal for a content management system. (Drupal is very secure.) The bot made 15000 attempts before I noticed it. Yes, that's 15000 with three zeros.

It was scary when I realized what was happening, and thankfully I was able to keep a cool head as I installed the needed module to block the attackers IP address.

I don't know if I'll be as lucky next time.

[Orsino]

2. No, site registration...

...wouldn't have anything to do, directly, with the security of the server itself. A hacker exploits holes in the server's operating system security, typically, which the site administrator should work on.

As far as I know, a hacker can't exploit the ability to post on a discussion board, but i might be wrong about this.