My phpBB forum has been spammed!

[ButtermilkJack]

I've just had one of my sites hacked by spammers. It's a phpBB forum and all of a sudden there's hundreds of 'users' with names like Oscar1161181047 and Troy1161181073.
It looks like its just one guy with a lot of links in his signature and if you click on one it says:

If you want me to stop spamming your guestbook, blog, forum, etc. just send me e-mail where specify your url(s) or domain(s). I’ll remove your pages from my database immediately, just after I get your e-mail.

What can I do in this situation? There wont have been any back-ups so going back to a 'safe mode' is not an option unfortunately. I've logged-in and changed User Activation Allowed to 'Admin activation only' so hopefully this will stop any further users registering. Also, I've changed settings as best I can to disallow usernames based on what his scriipt is using. Anything else I can try to stop it continuing, and also clean up what's there?
Cheers.

[ph3n0m]

the other thing is to install a mod, that disallows website urls being added via the registration script. ()

furthermore download the phpbb toolkit - it will allow you mass-delete users and their posts from the system (PHPBB Admin ToolKit :: Starfoxtj)

also upgrade your version of phpbb

and dont allow guest posting either

and read this phpbb spam

[ButtermilkJack]

Great, thanks for that. Thankfully there wasn't too much so I've been able to manually delete the added posts through simple moderation.

However, 2 questions...

You say I shouldn't let 'Guests' post. How do I stop this.? I couldn't find anything in the Admin control panel.

Also, when I search the user database through phpMyAdmin, the offenders are not showing up. Is there something I need to do to find them?

[blacknight]

I can't remember where you turn off guest posts in phpbb, but you can probably find it if you poke around the backend for long enough

[frakilk]

Originally Posted by ButtermilkJack

You say I shouldn't let 'Guests' post. How do I stop this.? I couldn't find anything in the Admin control panel.

Browse to Forum Admin -> Permissions and set each forum to Registered or higher.

[ButtermilkJack]

Originally Posted by frakilk

Browse to Forum Admin -> Permissions and set each forum to Registered or higher.

Done. Thanks guys!