Page 1 of 1

Cant remove Thread made by possible hack

Posted: Mon Nov 19, 2012 2:15 am
by hambacon
I had someone create a thread on my forum which I am not able to delete using the moderator control panel. The thread is created by Guest even though I have disabled guest posting and there is not a user by that name. The most recent post date is also incorrect. Check out the attached picture to see what I'm describing.

I've also noticed that random words on both the forum and my root website are turned into links with advertisements on mouse over.

any help with this is much appreciated!

Re: Cant remove Thread made by possible hack

Posted: Mon Nov 19, 2012 2:37 am
by CTCNetwork
Hi,

If you have DB access you are best to delete the post/topic from there.

Use your usual tools for the operation.. :)

Des. . . ;)

Re: Cant remove Thread made by possible hack

Posted: Mon Nov 19, 2012 4:19 am
by Oyabun1
hambacon wrote:he thread is created by Guest even though I have disabled guest posting and there is not a user by that name.
That can happen when you delete a user who has posts, because the user doesn't exist the post author is changed to guest.

If you go into that topic and then click the MCP link you should be able to delete it.

Re: Cant remove Thread made by possible hack

Posted: Thu Nov 22, 2012 4:35 am
by hambacon
thanks for the replies guys. I attempted to delete the thread using the MCP and this is what happens after I click yes on the confirm delete page. Also, I should mention that I have not deleted any users prior to that thread.

Code: Select all

General Error
SQL ERROR [ mysql4 ]

Incorrect string value: '\xD0\xB3\xD1\x82\xD0\xB0...' for column 'log_data' at row 1 [1366]

SQL

INSERT INTO phpbb_log (user_id, log_ip, log_time, log_operation, log_data, log_type, forum_id, topic_id) VALUES ('2', '198.228.200.161', 1353558747, 'LOG_DELETE_TOPIC', 'a:2:{i:0;s:26:\"гта на андроид\";i:1;s:13:\"HiellVussyHus\";}', 1, 19, 18)

BACKTRACE

FILE: (not given by php)
LINE: (not given by php)
CALL: msg_handler()

FILE: [ROOT]/includes/db/dbal.php
LINE: 757
CALL: trigger_error()

FILE: [ROOT]/includes/db/mysql.php
LINE: 175
CALL: dbal->sql_error()

FILE: [ROOT]/includes/functions.php
LINE: 3398
CALL: dbal_mysql->sql_query()

FILE: [ROOT]/includes/mcp/mcp_main.php
LINE: 821
CALL: add_log()

FILE: [ROOT]/includes/mcp/mcp_main.php
LINE: 119
CALL: mcp_delete_topic()

FILE: [ROOT]/includes/functions_module.php
LINE: 507
CALL: mcp_main->main()

FILE: [ROOT]/mcp.php
LINE: 244
CALL: p_master->load_active()
Suggestions?

Re: Cant remove Thread made by possible hack

Posted: Thu Nov 22, 2012 9:17 am
by Oyabun1
Either follow the instructions in this article, Doesn't have a default value errors or download and install the Support Toolkit and run the MySQL upgrader tool.

Re: Cant remove Thread made by possible hack

Posted: Thu Apr 11, 2013 12:26 pm
by hambacon
I'm having a similar problem like this again. This time it's a different user name, but like before the last post is by "Guest" and the join date is 1970. When I click on the thread it gives me a "The requested topic does not exist." page. I am able to delete the 100 or so threads that were created. How can I prevent this? I just implemented the Q&A spambot countermeasure. I was using a recaptcha before.

Re: Cant remove Thread made by possible hack

Posted: Thu Apr 11, 2013 1:07 pm
by Mick
Can you post a link to your board please?

Re: Cant remove Thread made by possible hack

Posted: Thu Apr 11, 2013 4:51 pm
by hambacon
Sure, you'll find it here:
http://mrktsquare.com/forum/viewforum.php?f=19

I also notice that visitors are able to see posts (such as these) that are "awaiting approval", but registered users are not. I'd like to just disable the post approval option all together. should I make a separate thread for that?

Re: Cant remove Thread made by possible hack

Posted: Thu Apr 11, 2013 4:57 pm
by Brf
Did you do this?
Oyabun1 wrote:Either follow the instructions in this article, Doesn't have a default value errors or download and install the Support Toolkit and run the MySQL upgrader tool.