hacked, fixed, lost forums.

This is an archive of the phpBB 2.0.x support forum. Support for phpBB2 has now ended.
Forum rules
Following phpBB2's EoL, this forum is now archived for reference purposes only.
Please see the following announcement for more information: viewtopic.php?f=14&t=1385785
chadattrailaddict
Registered User
Posts: 69
Joined: Fri Jun 04, 2004 3:51 pm

hacked, fixed, lost forums.

Post by chadattrailaddict »

hello,
i had my forum hacked, i was explained how to fix it, i have but how can i now get the original infomation back, e.g. all the old forum and topics?
thanks chad.

cybrid23
Former Team Member
Posts: 9877
Joined: Wed Jun 29, 2005 5:55 am
Location: Somewhere in the Midwest...
Contact:

Post by cybrid23 »

That depends on the instructions you were given.

Could as simple as changing the database prefix, or you mayhave to reload a backup of your database.

What instructions were you given to follow to get your site back?
---Never leave home without a towel and your peril sensitive sunglasses.
---Do Not PM Me For Support. It will go unanswered.
Thanks.

chadattrailaddict
Registered User
Posts: 69
Joined: Fri Jun 04, 2004 3:51 pm

Post by chadattrailaddict »

"Run my admin toolkit and click the "Security Scan" at the top.
Sanitize any red or yellow forums, this should remove most of the hacked messages.

I think your overall_footer might be affected as well at a quick glace because that last message is way low.

While your in there ban/demote/delete any fake admin accounts.
Then update to 2.0.19."

which i did. and i reported it to the "Incident Tracker".

cybrid23
Former Team Member
Posts: 9877
Joined: Wed Jun 29, 2005 5:55 am
Location: Somewhere in the Midwest...
Contact:

Post by cybrid23 »

Well, looks like the hacker may removed your old posts.

Wihtout a current database backup, you are out of luck. If you have one, then restore it. If your host has one, they may resotre it for you.
---Never leave home without a towel and your peril sensitive sunglasses.
---Do Not PM Me For Support. It will go unanswered.
Thanks.

User avatar
entengo
Registered User
Posts: 37
Joined: Thu Feb 09, 2006 11:49 pm
Location: The Alamo
Contact:

Post by entengo »

How'd they know about your forum? Did you spam a forum and you pissed someone off?

CFE_AnCiEnT__
Registered User
Posts: 87
Joined: Mon Feb 21, 2005 7:10 pm

Post by CFE_AnCiEnT__ »

My old forum gets hacked sometimes, and all I do is administrate and help people out.

You would think people would have something better to do with their time than hack a forum.
The CFE Administration Prevailes!
www.cfehosting.net

User avatar
Lumpy Burgertushie
Registered User
Posts: 67732
Joined: Mon May 02, 2005 3:11 am
Contact:

Post by Lumpy Burgertushie »

chadattrailaddict wrote: "Run my admin toolkit and click the "Security Scan" at the top.
Sanitize any red or yellow forums, this should remove most of the hacked messages.

I think your overall_footer might be affected as well at a quick glace because that last message is way low.

While your in there ban/demote/delete any fake admin accounts.
Then update to 2.0.19."

which i did. and i reported it to the "Incident Tracker".


how about a link so we can see what is going on.


robert
I'm baaaaaccckkkk. still doing work on donation basis. PM your needs.

Premium phpBB 3.3 Styles by PlanetStyles.net

If nobody is in the forest, does a tree really fall?

chadattrailaddict
Registered User
Posts: 69
Joined: Fri Jun 04, 2004 3:51 pm

Post by chadattrailaddict »

nope didnt spam it or anything, just came out of no where.....

http://www.trailaddict.co.uk/gbook/phpBB2/index.php heres the link.
i hav a back up of a few weeks before they hacked it but it was backed up using the older version.will it still work?

i reported it to the Incident Tracker and the guy looked at the file, edited and sent it back. he said to firstly try this.

1. Delete *all* files within your phpBB installation directory.
2. Go to your database and delete/drop all tables.
3. If you have other software/files on your site other than phpBB, please be sure to check them for anything suspicious.
4. Download a fresh copy of the latest phpBB.
5. Upload phpBB to your server.
6. Recreate your config.php file.
7. Use the BigDump program to restore your database.
8. Run the install/update_to_latest.php file to update your database.
9. Reinstall any MODs/styles you were previously using.

that didnt work so he said try this

Unzip the file I made, and then go to phpMyAdmin->select your database->click the Import tab at the top->and upload the unzipped file


that didnt work and now he has stopped helpping, well not replying.

thanks for the help.
chad.

User avatar
Lumpy Burgertushie
Registered User
Posts: 67732
Joined: Mon May 02, 2005 3:11 am
Contact:

Post by Lumpy Burgertushie »

check your backup file, make sure all the posts are there,

if so, then

what happened when you did the bigdump restore.

oh, check your backup file, see what the table prefix is ( default is phpbb_ )

and check your config.php file to see what table prefix is in there.

make the config.php file match what is in your database backup file.


robert
I'm baaaaaccckkkk. still doing work on donation basis. PM your needs.

Premium phpBB 3.3 Styles by PlanetStyles.net

If nobody is in the forest, does a tree really fall?

chadattrailaddict
Registered User
Posts: 69
Joined: Fri Jun 04, 2004 3:51 pm

Post by chadattrailaddict »

when i ran the bigdump this is wat it said
"Stopped at the line 659.

At this place the current query includes more than 300 dump lines. That can happen if your dump file was created by some tool which doesn't place a semicolon followed by a linebreak at the end of each query, or if your dump contains extended inserts. Please read the BigDump FAQs for more infos."

i will check wat the table prefix and the config file now.

chadattrailaddict
Registered User
Posts: 69
Joined: Fri Jun 04, 2004 3:51 pm

Post by chadattrailaddict »

Lumpy Burgertushie wrote: check your backup file, make sure all the posts are there,

if so, then

what happened when you did the bigdump restore.

oh, check your backup file, see what the table prefix is ( default is phpbb_ )

and check your config.php file to see what table prefix is in there.

make the config.php file match what is in your database backup file.


robert


]
my back up file is just a text doc that i downloaded from my forum control panel.....is the config file backed up in there too ?

User avatar
Lumpy Burgertushie
Registered User
Posts: 67732
Joined: Mon May 02, 2005 3:11 am
Contact:

Post by Lumpy Burgertushie »

ok, the error is because you have a backup with extended inserts.
and bigdump won't work with it.

your config.php file is in the main phpbb folder, just open it with your text editor, one of the lines will tell you what your table prefix is.

now, open that database backup file in your text editor, look at the first table,

if the prefix on it , does not match what is in the config.php file then change the config.php file to match.

examples:

config.php:
<?php


// phpBB 2.x auto-generated config file
// Do not change anything in this file!

$dbms = 'mysql4'; // make sure this is correct for your version of mysql

$dbhost = 'localhost'; //normally this is good but your host may be different
$dbname = 'yourinfohere';
$dbuser = 'yourinfohere';
$dbpasswd = 'yourinfohere';

$table_prefix = 'phpbb_'; //make sure this is whatever your old table prefix is

define('PHPBB_INSTALLED', true);

?>


database backup files:
##
## Table structure for table `phpbb_auth_access`
##

CREATE TABLE `phpbb_auth_access` (
`group_id` mediumint(8) NOT NULL default '0',
`forum_id` smallint(5) unsigned NOT NULL default '0',
`auth_view` tinyint(1) NOT NULL default '0',
I'm baaaaaccckkkk. still doing work on donation basis. PM your needs.

Premium phpBB 3.3 Styles by PlanetStyles.net

If nobody is in the forest, does a tree really fall?

chadattrailaddict
Registered User
Posts: 69
Joined: Fri Jun 04, 2004 3:51 pm

Post by chadattrailaddict »

ok, at the moment the only difference is the ' '

mine looks like this

Code: Select all

$dbhost = 'info';
$dbname = 'info';
$dbuser = 'info';
$dbpasswd = 'info';

$table_prefix = 'phpbb_';

define('PHPBB_INSTALLED', true);

?>

Code: Select all

#
# TABLE: phpbb_auth_access
#
DROP TABLE IF EXISTS phpbb_auth_access;
CREATE TABLE phpbb_auth_access(
	group_id mediumint(8) NOT NULL,
	forum_id smallint(5) unsigned NOT NULL,
	auth_view tinyint(1) NOT NULL,
is it being effected by the ' ' ?

User avatar
Lumpy Burgertushie
Registered User
Posts: 67732
Joined: Mon May 02, 2005 3:11 am
Contact:

Post by Lumpy Burgertushie »

no, so now we have established that this is not the problem. I suggested it because it often is the case.

let me look back over this topic and see what we can figure out.

robert
I'm baaaaaccckkkk. still doing work on donation basis. PM your needs.

Premium phpBB 3.3 Styles by PlanetStyles.net

If nobody is in the forest, does a tree really fall?

User avatar
Lumpy Burgertushie
Registered User
Posts: 67732
Joined: Mon May 02, 2005 3:11 am
Contact:

Post by Lumpy Burgertushie »

can you post a link to a copy of your backup file. or PM it to me.

I will look at your database and see if I can determin what the problem is.

robert
I'm baaaaaccckkkk. still doing work on donation basis. PM your needs.

Premium phpBB 3.3 Styles by PlanetStyles.net

If nobody is in the forest, does a tree really fall?

Locked

Return to “2.0.x Support Forum”