XOOPS 
Forum
Forum Index General Forums Community Support Modules Support Themes Support Development International Support Module Hack Reviews Theme Designer Talk
  1. Board index / 
  2. XOOPS Community Support forums / 
  3. Q and A 
  4.  / Help!! i have been hacked how do i fix it>?
Register
11
wizanda
Re: Help!! i have been hacked how do i fix it>?

  • 2005/1/6 20:07

  • wizanda

  • Home away from home

  • Posts: 1585

  • Since: 2004/3/21


yeh tried firefox no joy
Even tried turning my fire wall off for a second to see if it was down to that
Dont know i am curious as to the files maybe had an ip ban some how?
Will check tomorrow else where and see
then maybe can see why?!
does the site function fast or take age to load up for you?
as when i try it take ages and then say no server on ie
and firefox says no data
12
m0nty
Re: Help!! i have been hacked how do i fix it>?

  • 2005/1/6 20:50

  • m0nty

  • XOOPS is my life!

  • Posts: 3337

  • Since: 2003/10/24


on 1st view it took quite a while but i'm on 56k here, and u have a hell of a lot of content on the home page..

just went again and it only took abt 10 seconds, but thats due to my browser cache from the last visit..
13
Tabasco
Re: Help!! i have been hacked how do i fix it>?

  • 2005/1/6 23:05

  • Tabasco

  • Quite a regular

  • Posts: 203

  • Since: 2003/12/26


Site looks okay to me.

There is some crazy stuff in your shoutbox, like:


Guest459*: Wizanda competition: The next person to reply to me will recieve lots of wizanda goodies and stuff from the site


14
wizanda
Re: Help!! i have been hacked how do i fix it>?

  • 2005/1/8 10:34

  • wizanda

  • Home away from home

  • Posts: 1585

  • Since: 2004/3/21


Ok really need some help here, something really weird is going on

Yesterday i tried my site from the libray and it functions correctly, updated it to the latest xoops
Can't see any ip bann from the site its self

Today i tried from a computer i had been using for the last couple of months and my own pc, no luck.
It works to be able to see cpanel and ftp yet not my site via http

For some reason from pc's, that i had been using on the site, i can't even get it to load, all it says is server can not be found.

Now the thing that gets me is what were them files, why would one be in the theme and what looks like a folder for a .wysywigPro_edit_theme_html.php be in the main directory

Could someone have broken into the theme with this file then added a wysywig editor to my site and some how banned me via ip's i have been using

If this is the case what can i do to fix it and also make sure it dosent happen again
15
Peekay
Re: Help!! i have been hacked how do i fix it>?

  • 2005/1/8 13:05

  • Peekay

  • XOOPS is my life!

  • Posts: 2335

  • Since: 2004/11/20


Do you do any work on the site in FrontPage?. 'Cos, the only questions about mysterious wysiwigPro files I could find were in this thread on this forum.

wysiwigPro is a bona-fide editor. You might want to check their website to see if they have a forum?

If it's IE6 or Norton blocking access to your site, you will probably find a solution here:

http://codex.wordpress.org/Enable_Sending_Referrers
16
wizanda
Re: Help!! i have been hacked how do i fix it>?

  • 2005/1/8 13:28

  • wizanda

  • Home away from home

  • Posts: 1585

  • Since: 2004/3/21


It may be a bona-fide editor, yet i didnt stick it on my server,
plus why a file connecting it in my themes folder??
Plus i have tried firefox and IE
It works on IP adrress's that i haven't used recently, yet all PC's that i normaly use, i can't access my site
It just takes ages loading and then says can not find server
On both usual connections they are broadband, so it should load fast
So either they have hacked me or i don't know??
Help please can u lot pay attention!!
as if this has happened to me and i have been hacked, it is quite easy that other XOOPS sites may be hacked into via the theme!!
as it dosent contain a index.html as other folders do
There is no reason i can tell other then being hacked why i can't access my site from usual PC's yet can from others
17
m0nty
Re: Help!! i have been hacked how do i fix it>?

  • 2005/1/8 13:43

  • m0nty

  • XOOPS is my life!

  • Posts: 3337

  • Since: 2003/10/24


regarding your theme, i can't really answer that 1.. what i could suggest tho is if u have a backup of your theme files etc.. to delete them from the server via ftp and reupload the theme folder backup.. then delete everything in templates_c & cache (do the same with the default theme)

if it's an ip ban that should be able to be changed via phpmyadmin in the config table.. you can also change the default theme there too try changing it to DEFAULT that might give u access enuff.. but i can't understand y it's doin it on every machine you go on..
18
wizanda
Re: Help!! i have been hacked how do i fix it>?

  • 2005/1/8 15:43

  • wizanda

  • Home away from home

  • Posts: 1585

  • Since: 2004/3/21


Thats the funny thing, it isnt every machine, just the ones i use normaly
The pc at the libray worked!
Might try changing the theme from there and see if it makes my site viewable at home
Also do you mean i can just edit the MySQL in php admin
to see if there is an ip bann from there?
19
Peekay
Re: Help!! i have been hacked how do i fix it>?

  • 2005/1/8 15:48

  • Peekay

  • XOOPS is my life!

  • Posts: 2335

  • Since: 2004/11/20


If it's definitely not a referrer issue, you need to talk to your host. If you are on a shared server it's possible another client has wysiwigPro installed and it has been used as a gateway for an exploit.

The recent Santy webworm gained access through vulnerable phpBB forums, but it often affected every PHP and ASP site on the same server, even those who were not running phpBB.

If the server is *still* under attack, your host will need to resolve the problem before anything that you do will help.
20
m0nty
Re: Help!! i have been hacked how do i fix it>?

  • 2005/1/8 16:02

  • m0nty

  • XOOPS is my life!

  • Posts: 3337

  • Since: 2003/10/24


yes u could try this query in phpmyadmin or whatever sql tool u use.. (change xoops_ to your db prefix)

UPDATE xoops_config SET conf_value =0 WHERE conf_id =47 LIMIT 1
« 1 (2) 3 »

Login

Register now!  |  Lost Password?

Search

Advanced Search

Recent Posts

Who's Online

212 user(s) are online (167 user(s) are browsing Support Forums)

Members: 0

Guests: 212

more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Nov 30
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits