Hacked, Need Help

New Member Joined: Nov 17, 2003 Posts: 20

some bastards hacked into my site and deleted all the admins, my question in now all of the news articles have no name or are posted under the names of the hackers, where it says "posted by"

what would be the SQL command in phpmydamin to make all the articles listed under the aid name of "hacker" to be listed under the my aid.

I have sentinel running, unsure how they got in.

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

Were you using the Admin Auth functionality of NukeSentinel? Do you use Coppermine? Do you have the latest security patches (v2.5) installed?

Posted: Wed Sep 08, 2004 6:25 pm

did not use admin auth, no coppermine

Posted: Wed Sep 08, 2004 6:27 pm

the hacker calls himself master, look like he hits a lot of nuke oriented sites

Posted: Wed Sep 08, 2004 6:29 pm

If you were not using Admin Auth then he got in through the admin.php exploit and added an admin. he then proceeded to destroy. Were you blocking admin and author exploits in NukeSentinal? It doesn't appear that you were as they stop that attack. But, Admin Auth stops them dead in their tracks.

New Member Joined: Jun 04, 2004 Posts: 13

Admin Auth:

How to use this precisely Raven, coz I cannot get it to work Sad

TIA
Anthony

Insane Joined: Jul 30, 2004 Posts: 85

Maybe it's time http auth is on by default?

Posted: Sat Sep 11, 2004 8:54 am

What is not working? Is it Not Available or when you try to login it doesn't appear to accept your username and password. Saying something 'doesn't work' isn't much help in helping you Wink

Posted: Thu Oct 07, 2004 7:55 am

OK,

Let me try it this way ... it is not popping up an userid/password box to put in the details...

Posted: Thu Oct 07, 2004 8:00 am

Make sure it is ON in NukeSentinel Administration.