Hacked-Need help correcting

Posted: Mon Jun 21, 2004 5:46 pm

I was hacked this morning. I managed to log back in following your advice in your other posts here. All of the blocks have been deleted and replace with an Administration Block and a User's Custom Block, neither one will allow me to delete it. Also in FTP, All of my normal blocks still appear. Sad

Do you know how to get rid of those and add my originals back in.
I am pretty new to php and am running 7.0

I have not changed all of the main screen yet incase you have any clue on who this is or how to find out.

Thanks in Advance

http://www.averagefan.com

Posted: Mon Jun 21, 2004 7:09 pm

Did you go to Admin Panel>Blocks>Add a New Block and add your old blocks?
Delete the blocks you are not using.

Posted: Mon Jun 21, 2004 7:51 pm

I have not loaded the old blocks that way yet. The two I have listed above will not allow me to delete them. I don't know if they were placed by the hacker to allow them entry back into my site.

[/img]

Posted: Mon Jun 21, 2004 8:50 pm

Could you give me a Temp Admin account and password so I can have a look? If this is cool with you PM me the info

Hangin' Around Joined: May 30, 2004 Posts: 46

Using phpMyAdmin, go to nuke_blocks and you will find that they modified the Content of the affected blocks.

Posted: Tue Jun 22, 2004 7:34 am

How do I correct that modification in PHPMyAdmin? I've only been in there once before and that was to clear the passwords.

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

Nukeum66 wrote:

Did you go to Admin Panel>Blocks>Add a New Block and add your old blocks?
Delete the blocks you are not using.

Try what Nukeum66 suggests Smile

Posted: Tue Jun 22, 2004 7:51 am

I added a few of them to get some on the screen.

I PM'd Nukeum66 with a user name and password.

Thanks

Posted: Tue Jun 22, 2004 2:35 pm

swede,

Sent you a PM .... Wink

Posted: Tue Jun 22, 2004 8:53 pm

Thanks for all your help, I downloaded and installed HackAlert and Sentinel hopefully I have them configured right Rolling Eyes

so this won't happen again.

Steve

Posted: Tue Jun 22, 2004 9:42 pm

Good Man!

Posted: Tue Jun 22, 2004 9:54 pm

swede wrote:

Thanks for all your help, I downloaded and installed HackAlert and Sentinel hopefully I have them configured right Rolling Eyes

so this won't happen again.

Steve

You do not need HA with sentinel. It can conflict if used in admin.php. See specifically the first 2 posts in this thread http://www.ravenphpscripts.com/postt2016.html

Posted: Wed Jun 23, 2004 7:02 am

Ok, I removed the HA script from the mainfile.php.

I guess I am done and ready to go.

Thanks again