Forums Hacked - Solved

Lieutenant Joined: Sep 22, 2005 Posts: 204 Location: NYC

My Forums were hacked on one of my sites.

They inserted, what looks like asian writing, into the includes/template.php, which I was able to replace, but now I get this error message:

function init() { tinyMCEPopup.resizeToInnerSize(); var formObj = document.forms[0]; formObj.numcols.value = tinyMCE.getWindowArg('numcols', 1); formObj.numrows.value = tinyMCE.getWindowArg('numrows', 1); } function mergeCells() { var args = new Array(); var formObj = document.forms[0]; args["numcols"] = formObj.numcols.value; args["numrows"] = formObj.numrows.value; tinyMCEPopup.execCommand("mceTableMergeCells", false, args); tinyMCEPopup.close(); }

I am not sure how to correct that one Confused

JoAnne ~

Support Mod Joined: Oct 19, 2004 Posts: 1032 Location: UK

Hey JoAnne

Seen you around a lot so glad to help you out!

Have you tried replacing the includes/template.php with a stock version?

Let us know

Lieutenant Joined: Sep 22, 2005 Posts: 204 Location: NYC

phpnuke-hosting wrote:

Hey JoAnne

Seen you around a lot so glad to help you out!

Have you tried replacing the includes/template.php with a stock version?

Let us know

Hey phpnuke-hosting

I replaced the includes/template.php with one from my other working site. I haven't had a chance to investigate further to see if I can solve it, probably won't be able to till this weekend. Banned the IP that did it though, not that it will stop them Wink

Thank you for your help

JoAnne ~

Support Mod Joined: Oct 19, 2004 Posts: 1032 Location: UK

Ok well let us know if it did, if not then let me know.

It could be malicious code in your database, so gimme a shout if you get stuck.

Lieutenant Joined: Sep 22, 2005 Posts: 204 Location: NYC

phpnuke-hosting wrote:

Ok well let us know if it did, if not then let me know.

It could be malicious code in your database, so gimme a shout if you get stuck.

The hacker got into a few files in the includes folder, which I replaced, but I am still getting the same error. Ran a check on the db which checked out ok. I quess my next step will be to replace as many of the forum files as I can.... just gotta love these guys Rolling Eyes

Lieutenant Joined: Sep 22, 2005 Posts: 204 Location: NYC

Replaced the forums/index.php and that brought back my forums. They seem to be working alright now.

The next step is to 'batten down the hatches' Wink

JoAnne ~

Support Mod Joined: Oct 19, 2004 Posts: 1032 Location: UK

Well glad to see you got them working again.

Are you running Sentinel? if not, it might well be the most sensible precaution.

Lieutenant Joined: Sep 22, 2005 Posts: 204 Location: NYC

phpnuke-hosting wrote:

Well glad to see you got them working again.

Are you running Sentinel? if not, it might well be the most sensible precaution.

I have Protector and have not had a problem till now.

The hackers entered through weblogs and that's how it affected the forums. There has been another security update to weblogs, if I decide to keep weblogs up, which I now have doubts that I will.

I will switch from Protector to Sentinel as Protector hasn't been updated in a long time. I was hoping someone would take over the development, but that has not happened.

Is Sentinel difficult to install?

Thanks

JoAnne ~

Support Mod Joined: Oct 19, 2004 Posts: 1032 Location: UK

No I have installed it nearly a hundred times (if not more!) and I have never encountered any problems.

The only bit that can be tricky is the changes to core files, but with a little bit of time and patience you'll get there (depending on how experienced you are with nuke)

Any problems then gimme a shout

Lieutenant Joined: Sep 22, 2005 Posts: 204 Location: NYC

phpnuke-hosting wrote:

No I have installed it nearly a hundred times (if not more!) and I have never encountered any problems.

The only bit that can be tricky is the changes to core files, but with a little bit of time and patience you'll get there (depending on how experienced you are with nuke)

Any problems then gimme a shout

As I did not install Protector, I have no idea which files were affected by the installation. Do you see any problems with installing Sentinel on top of Protector?

Support Mod Joined: Oct 19, 2004 Posts: 1032 Location: UK

Not really as platinum has both, but it might be wise to remove the protector files to prevent any future protector exploits affecting you.

If you want I can do this all for you for a small fee, thats entirely up to you but if your interested then PM me.

Lieutenant Joined: Sep 22, 2005 Posts: 204 Location: NYC

phpnuke-hosting wrote:

Not really as platinum has both, but it might be wise to remove the protector files to prevent any future protector exploits affecting you.

If you want I can do this all for you for a small fee, thats entirely up to you but if your interested then PM me.

Thank you, phpnuke-hosting, for the offer, but before I saw this, I had contacted Evaders99 to do the job. I didn't know that you offered those services as well.

I really like to attempt the installs on my own, so I can learn more, but I am too busy with so many other things at this time.

Thanks again for your help

JoAnne ~

Support Mod Joined: Oct 19, 2004 Posts: 1032 Location: UK

Hey its no problem.

I do offer those services from time to time when i can.

Evaders is also incredibly well versed on the subject and I'm sure he will do a fantastic job for you.

Regards