Register Members List Search Today's Posts Mark Forums Read

Reply
 
Thread Tools
  #1  
Old 28 Sep 2012, 20:16
michelle86 michelle86 is offline
 
Join Date: Jan 2010
My forum was hacked - please help!

My forum has been hacked. All the php files have been changed.


All of the php files for my site have this code added to the very top:


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

I need help and advice. I am in the process of removing the code. I've reuploaded all the files, but am going through and having to manually edit files of add-ons and stuff.

Basically this php code wiped out everything but the first few inches of a page. Everything below that was gone. Searches were not functional, etc. It's a big mess.
Reply With Quote
  #2  
Old 28 Sep 2012, 20:23
ForceHSS's Avatar
ForceHSS ForceHSS is offline
 
Join Date: Apr 2008
check logs see how they got in and change all passwords
Reply With Quote
  #3  
Old 28 Sep 2012, 20:24
michelle86 michelle86 is offline
 
Join Date: Jan 2010
I've contacted my host (bluehost) and they said there is no way for them to see the history of who has logged into my bluehost account.

Is there any other way I can check?
Reply With Quote
  #4  
Old 28 Sep 2012, 20:33
CAG CheechDogg's Avatar
CAG CheechDogg CAG CheechDogg is offline
 
Join Date: Feb 2012
I have dealt with bluehost in the past and they are just not someone I trust at all. You might want to think about switching to another hosting solution.


Without enough persistence from me and a few questions that I asked them I was able to get them to give me access to an account of mine that I had no idea what the credentials were. They should of never given me access or changed any information for me to access that account because "I" was not able to verify who I was, yet I still got what I wanted.
Reply With Quote
  #5  
Old 28 Sep 2012, 20:39
michelle86 michelle86 is offline
 
Join Date: Jan 2010
Just saw a .logs file. In it was a logs1.txt file with a bunch of weird urls listed in it.

I deleted it.

--------------- Added 28 Sep 2012 at 21:03 ---------------

Found and removed all the code. Everything is working now (I hope anyway). Still can't figure out how someone got in or where they got in.

If anyone has any advice or has any ideas, please let me know.
Reply With Quote
  #6  
Old 28 Sep 2012, 21:09
ForceHSS's Avatar
ForceHSS ForceHSS is offline
 
Join Date: Apr 2008
Every host keeps logs if they say they don't they are lying
Reply With Quote
  #7  
Old 28 Sep 2012, 21:22
CAG CheechDogg's Avatar
CAG CheechDogg CAG CheechDogg is offline
 
Join Date: Feb 2012
Originally Posted by ForceHSS View Post
Every host keeps logs if they say they don't they are lying

Exactly ForceHSS, I had very bad experiences with those guys.

michelle86 do your self a favor and switch to another host to save your self future head aches.

I use HostGator michelle86, check them out.
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 00:50.

Layout Options | Width: Wide Color: