Hacked by "Fatal Error"

Nuke Soldier Joined: Oct 11, 2003 Posts: 12

"Fatal Error Onwz You! Go-go-go admin ! " <br>
Seems my site was hacked. I guess ill just lock it up tighter. Thanx for exposing the flaw.<br>
if(stristr($_SERVER["QUERY_STRING"],'AddAuthor') || stristr($_SERVER["QUERY_STRING"],'UpdateAuthor')) { die("Illegal Operation"); }<br> this added to the end of admin.php (after the credits and before the ?> tag ) ended the exploit. Then I went into my nuke database with phpAdmin. Checked tha nuke_authors table to find a god user had been added, so I deleted him. Hope Google picks up on this soon. I want this fool to be out of luck asap.

Support Mod Joined: Feb 15, 2004 Posts: 806

Urm... What is that mean?
You've got hacked after installing Admin Secure 1.7?

Nuke Cadet Joined: Jun 13, 2004 Posts: 4

thanks mate , had the same happen to me ..

good on ya for posting a fix

Nuke Soldier Joined: Jul 13, 2003 Posts: 22

I got a similar proble. How did you fix this? I have deleted the unwanted element as an admin user. But, please le me know how to remove the defacing. The words are similar to yours. Needless to say I am totally new to php Smile

jup

Support Mod Joined: Feb 15, 2004 Posts: 806

I saw many of that, different text but using the same attack engine. They got your MD5 admin password and replace/add your site's message. Check such message through admin menu (clicking on Message icon).

If you are installing Admin Secure (1.6 or above), you can prevent such exploit (prevent auto admin creation) or by enabling Auth Login from Admin Secure config menu (if exploit attack using existing admin account).

Nuke Soldier Joined: Jul 13, 2003 Posts: 22

Thanks for the lead. Removed the defacing. Would install the requisite admin security

jup