God status compromised

Guest

Soemone has gotten my login info for my PHP Nuke and now has appointed them selves God staus, how do i remedy this?
Please help.

Lieutenant Joined: Sep 18, 2003 Posts: 263

Hopefully someone who really knows will chime in...until then...

I think this is where god lives...
in phpmyadmin, look up the nuke_authors table. If you click on the magnifying glass next to the tables' link, phpmyadmin will display the contents of the file (all your admins and superadmins).

Delete the admin's you do not recognize. Obviously, someone who was a superadmin as God is, has been able to add/edit user info/users. For sure, change the passwords of all admins. Man, I'd change everything I could including the sitekey, (haha!) and the user I use to connect to the database (and password) the works...

I'd move hosts, move to Canada, change religion. I'd also install the protector system for phpNuke so that as I keep an eye on my logs over the next few weeks, I can ban anyone/IP that tries to access an admin function.

Any idea how this happenned?

Maybe one of the nuke security sites has a disaster/recovery guideline doc available.

Hopefully someone who knows will swing by soon. Good luck.

Posted: Tue Oct 14, 2003 11:20 am

Quote:

Any idea how this happenned?

Yeah - just read the news for the past couple of days and get the patches.

-sting

Nuke Cops Founder Joined: Nov 14, 2002 Posts: 5939

Yes we've released a couple patches in the past few days. Please install them.