Website Problem - Hacked ?

Regular Joined: Sep 14, 2003 Posts: 74

To my amazment, I just checked my detailed stats, and saw that the system has started including this month's stats into last year's November month stats aswell!!

So now, both Novebmer 2002 and 2003 are incrementing at the same time. Also, there seems to be a problem with the months order. They seem to have been mixed up.

This is really wierd. Anyone got an idea ??

Here's the direct link should you like to see for yourself:

http://www.firewall.cx/modules.php?name=Statistics&op=Stats

I've now just discovered that there are more problems! My 'Site Info' block is not displaying the amount of Visitors currently visiting, members online and a bit more info that should be there!

This is developing to a nightmare!!!!!!!!!!!!!!!!!! Shocked

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

I have heard of this and it seems it's related to the installation of something. I know that doesn't help you right now but I'll try to find it.

Posted: Tue Nov 18, 2003 4:34 pm

I can tell you what I have done with the site today as the problem appear today.

1) I read up on your post reading fixing a bug where someone trys to add a user as a moderator and the post you pointed to required to create a Moderator Group and then assign the user to that group. So thats one thing I did

2) Played around with the blocks, trying to fix the problem with the fonts ... I've disabled it already to see if thats causing the problem (i didnt think it was related, but had to try).

Looking at the nuke_stats_month table entries with phpmyadmin I can see the multiple entries:

year month hits
2003 1 0
2003 2 0
2003 3 0
2003 4 0
2003 5 0
2003 6 0
2003 7 0
2003 8 0
2003 9 223302
2003 10 448891
2003 11 256426
2003 12 0
2003 5 0
2003 6 0
2003 7 0
2003 8 0
2003 9 0
2003 10 0
2003 11 1615
2003 12 0
2003 6 0
2003 7 0
2003 8 0
2003 9 0
2003 10 0
2003 11 1612
2003 12 0

Any Idea Raven ?

Posted: Wed Nov 19, 2003 2:37 am

I've just tried opening the 'Nuke Sessions' table to see its contents (through phpmyadmin) and I'm getting the following error:

#1016 - Can't open file: 'nuke_session.MYI'. (errno: 145)

Also when selecting my database tree from the left frame of phpmyadmin, it shows all my tables and their size. I noticed that the nuke_session table is reported as "in use" all the time.

I'm suspecting a connection has been left open or something similar to that;

Any idea whats happening and how I can fix this problem ?

Posted: Wed Nov 19, 2003 4:45 am

Well, I've managed to fix part of the problem. Issuing a "repair" command fixed it.

I'm now trying to deal with the statistics which have gone a bit crazy.

Removing the double entries was easy, but because of the way the SQL server executes the commands, removing the '2003 6 0 ' made me loose all such entries.

So, I m left without the month of "June" in my table.

I created a new row but it was placed at the end or the last existing row, right after december!

Is there any way I can 'move' a row or will I have to simply change all values on all rows effectively moving them down one space, so I can insert the missing 'june' ?