Register Members List Search Today's Posts Mark Forums Read

Reply
 
Thread Tools
  #1  
Old 02 Feb 2014, 20:42
sheyworth sheyworth is offline
 
Join Date: Mar 2009
Really Big Problem

Hello everyone, my website is http://centerstagesports.com

I switched to a new host recently so we had to switch our nameservers. while the nameservers were updating, someone somehow got into the forum and when you click the forum tab it goes to a wordpress page that says knickers is cool.

If you look at whats going on, it goes to the /install directory which there isn't even a install directory in the database. This literally makes no sense for me and this is for VB 4.20 by the way. Please let me know if you have any suggestions, thanks.
Reply With Quote
  #2  
Old 02 Feb 2014, 22:14
ozzy47's Avatar
ozzy47 ozzy47 is offline
 
Join Date: Jul 2009
Real name: Chris
Open your includes/config.php file and below<?php add this line:


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

So it looks like this:

Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Does the issue still persist?
__________________
You can get access to my 180 mods for vB 3.6 - 4.x at The Admin Zone as well as the professional support you are used to. New vBulletin Spider Definitions, vBulletin Spiders List Hits 1000 Spiders! ​ OzzModz down. Site has had a data breach, checking how the intrusion happened. Change your PW if you use the same one on my site and others.
Reply With Quote
  #3  
Old 03 Feb 2014, 00:25
Max Taxable's Avatar
Max Taxable Max Taxable is offline
 
Join Date: Feb 2011
Originally Posted by sheyworth View Post
Hello everyone, my website is http://centerstagesports.com

I switched to a new host recently so we had to switch our nameservers. while the nameservers were updating, someone somehow got into the forum
Highly unlikely.

Here's page source code, it's not any "hacking" I've ever seen.


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Reply With Quote
  #4  
Old 03 Feb 2014, 00:32
ozzy47's Avatar
ozzy47 ozzy47 is offline
 
Join Date: Jul 2009
Real name: Chris
Right, but need to disable the plugins to see if they did it in a plugin, or in the template.
__________________
You can get access to my 180 mods for vB 3.6 - 4.x at The Admin Zone as well as the professional support you are used to. New vBulletin Spider Definitions, vBulletin Spiders List Hits 1000 Spiders! ​ OzzModz down. Site has had a data breach, checking how the intrusion happened. Change your PW if you use the same one on my site and others.
Reply With Quote
  #5  
Old 03 Feb 2014, 00:35
Max Taxable's Avatar
Max Taxable Max Taxable is offline
 
Join Date: Feb 2011
Originally Posted by ozzy47 View Post
Right, but need to disable the plugins to see if they did it in a plugin, or in the template.
I agree. Also more likely than timely "hacking."

But.

I think it is more likely the nameservers are pointing to the wrong place, than it being a "hacker." Or even more likely, this existing WP installation is being called.

Last edited by Max Taxable; 03 Feb 2014 at 02:57.
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 00:21.

Layout Options | Width: Wide Color: