";
?>
and this one
$xoops_admin_menu_js = "function popUpL2() {
shutdown();
popUp("L2",true);
}
function popUpL4() {
shutdown();
popUp("L4",true);
}
function popUpL6() {
shutdown();
popUp("L6",true);
}
function popUpL8() {
shutdown();
popUp("L8",true);
}
function popUpL10() {
shutdown();
popUp("L10",true);
}
function popUpL12() {
shutdown();
popUp("L12",true);
}
";
$xoops_admin_menu_ml[2] = "setleft('L2',105);
settop('L2',165);
";
$xoops_admin_menu_ml[4] = "setleft('L4',105);
settop('L4',180);
";
$xoops_admin_menu_ml[5] = "setleft('L6',105);
settop('L6',195);
";
$xoops_admin_menu_ml[6] = "setleft('L8',105);
settop('L8',210);
";
$xoops_admin_menu_ml[7] = "setleft('L10',105);
settop('L10',225);
";
$xoops_admin_menu_ml[8] = "setleft('L12',105);
settop('L12',240);
";
$xoops_admin_menu_sd[2] = "popUp('L2',false);
";
$xoops_admin_menu_sd[4] = "popUp('L4',false);
";
$xoops_admin_menu_sd[5] = "popUp('L6',false);
";
$xoops_admin_menu_sd[6] = "popUp('L8',false);
";
$xoops_admin_menu_sd[7] = "popUp('L10',false);
";
$xoops_admin_menu_sd[8] = "popUp('L12',false);
";
$xoops_admin_menu_ft[1] = ".XOOPS_URL."/modules/system/admin.php' onmouseover='shutdown();'>.XOOPS_URL."/modules/system/images/system_slogo.png' alt='' />
";
$xoops_admin_menu_ft[2] = ".XOOPS_URL."/modules/news/admin/index.php' onmouseover='moveLayerY("L2", currentY,event) ; popUpL2();'>.XOOPS_URL."/modules/news/images/news_slogo.png' alt='' />
";
$xoops_admin_menu_ft[4] = ".XOOPS_URL."/modules/newbb/admin/index.php' onmouseover='moveLayerY("L4", currentY,event) ; popUpL4();'>.XOOPS_URL."/modules/newbb/images/xoopsbb_slogo.png' alt='' />
";
$xoops_admin_menu_ft[5] = ".XOOPS_URL."/modules/xoopspoll/admin/index.php' onmouseover='moveLayerY("L6", currentY,event) ; popUpL6();'>.XOOPS_URL."/modules/xoopspoll/images/xoopspoll_slogo.png' alt='' />
";
$xoops_admin_menu_ft[6] = ".XOOPS_URL."/modules/smartsection/admin/index.php' onmouseover='moveLayerY("L8", currentY,event) ; popUpL8();'>.XOOPS_URL."/modules/smartsection/images/module_logo.gif' alt='' />
";
$xoops_admin_menu_ft[7] = ".XOOPS_URL."/modules/article/admin/index.php' onmouseover='moveLayerY("L10", currentY,event) ; popUpL10();'>.XOOPS_URL."/modules/article/images/logo.png' alt='' />
";
$xoops_admin_menu_ft[8] = ".XOOPS_URL."/modules/tinyeditor/admin/index.php' onmouseover='moveLayerY("L12", currentY,event) ; popUpL12();'>.XOOPS_URL."/modules/tinyeditor/images/tinyeditor.png' alt='' />
";
$xoops_admin_menu_dv = "News .XOOPS_URL."/images/pointer.gif' width='8' height='8' alt='' /> .XOOPS_URL."/modules/system/admin.php?fct=preferences&op=showmod&mod=2' onmouseover='popUpL2();'>Instellingen
[Sluit venster] .XOOPS_URL."/modules/news/images/news_slogo.png' alt='' /> ";
?>
It's not a script that comes with Xoops, but I think it is created upon installing or so...
I haven't checked it, but I think if I remove it it can't find any modules either.
EDIT:
When somebody hacks a site they normally leave something behind (a message or files). Speaking about files, did you check if somebody stored big files somewhere?
This happened ones with my site where somebody placed some big movie files in a folder. It slowed down my site first until it crashed.
10
Quote:
1. Done
2. it does, always has
3. all tools my provider (Ipower) has for me I cannot see
4. only 1 db user, that's all I've ever had
5. phpmyadmin doesn't let you in without the valid userid/pwd...bogus or blank is rejected
6. yeah...I thought that might be the answer
Appreciate the suggestions, I'll let you know how it comes out.
skenow wrote:
The database may be there, but it does not sound like it is the way you left it - incorrect password = altered database; blocks missing and modules not installed = altered database, too.
I would:
1. change your database user/password immediately
2. determine if the root user for the database has a password and create one if it doesn't
3. determine if there is an anonymous user that can access the database and remove it if it does exist
4. remove any other database users
5. determine if phpmyadmin can access the db without entering a username/password - change it if it can
6. find your most recent database backup before the hack was noticed and be ready to restore it
1. Done
2. it does, always has
3. all tools my provider (Ipower) has for me I cannot see
4. only 1 db user, that's all I've ever had
5. phpmyadmin doesn't let you in without the valid userid/pwd...bogus or blank is rejected
6. yeah...I thought that might be the answer
Appreciate the suggestions, I'll let you know how it comes out.
Login
Search
Recent Posts
Who's Online
Donat-O-Meter
| Stats | |
| Goal: | $100.00 |
| Due Date: | Nov 30 |
| Gross Amount: | $0.00 |
| Net Balance: | $0.00 |
| Left to go: | $100.00 |
 |
|