[sheyworth]

Hello everyone, my website is http://centerstagesports.com

I switched to a new host recently so we had to switch our nameservers. while the nameservers were updating, someone somehow got into the forum and when you click the forum tab it goes to a wordpress page that says knickers is cool.

If you look at whats going on, it goes to the /install directory which there isn't even a install directory in the database. This literally makes no sense for me and this is for VB 4.20 by the way. Please let me know if you have any suggestions, thanks.

[ozzy47]

Open your includes/config.php file and below<?php add this line:

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

So it looks like this:

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

Does the issue still persist?

[Max Taxable]

Originally Posted by sheyworth

Hello everyone, my website is http://centerstagesports.com

I switched to a new host recently so we had to switch our nameservers. while the nameservers were updating, someone somehow got into the forum

Highly unlikely.

Here's page source code, it's not any "hacking" I've ever seen.

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

[ozzy47]

Right, but need to disable the plugins to see if they did it in a plugin, or in the template.

[Max Taxable]

Originally Posted by ozzy47

Right, but need to disable the plugins to see if they did it in a plugin, or in the template.

I agree. Also more likely than timely "hacking."

But.

I think it is more likely the nameservers are pointing to the wrong place, than it being a "hacker." Or even more likely, this existing WP installation is being called.