Hi all,
My forum was attacked. Hacker can edit infomations, such as they can freely add Reputation for any account, change the title group of a user. I'm using Thanks 3.9.1 plugin, and hacker can take all member account to the thanks list of his post,... and may be others things which I've not found yet.
Please help me to solve the problems and get more security.
Thank you!
(2012-04-22, 10:30 AM)hddt Wrote: [ -> ]Hi all,
My forum was attacked. Hacker can edit infomations, such as they can freely add Reputation for any account, change the title group of a user. I'm using Thanks 3.9.1 plugin, and hacker can take all member account to the thanks list of his post,... and may be others things which I've not found yet.
Please help me to solve the problems and get more security.
Thank you!
Disable and uninstall all plugins, And delete the user directly from the database with phpMyAdmin.
Also, change all your passwords (mysql, user etc).
Thank you euantor and Echo Off!
That's a SQL injection error from a plugin and it's fixed.
I had still problems, hacker added very much reputations using my Admin account to his account. I'm using this
Thanks plugin, hacker take all members of forum to his post thank list
For some delicate reasons, I can't delete his account. I asked him but he said that he couldn't undo his actions.
Can I edit the Reputation and Thanks count of a user account?
Thank you!
Yes, you should be able to edit it via phpmyadmin at the very least.
Thank you, I will study to find out the way to do, because I'm not proficient in code
.
Run the following in phpMyAdmin
DELETE FROM mybb_users WHERE username = 'HackerUsername';
Or if you know the uid
DELETE FROM mybb_users WHERE uid = 'HackerUID';
If the hacker made posts, run the second query, but replace mybb_users with posts and/or mybb_threads.
Do you have a backup of your forum?
Just simply naviagte through your phpMyAdmin, and go to the mybb users, and then find his username, and on that row, delete his details. If that does not work, He has probably done something to the database, so try checking and fixing the table in phpMyAdmin.
Thank you all for your support. I solved the problems
.