MyBB Community Forums

Full Version: My forum has been silently hacked
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
I 've always been the only admin of my forum.
Some months ago (maybe 2-3 months) I found 2 users with administration permission that i never set them as admin.
But my site has not been changed or deleted, i saw no other changes.

This morning i opened config.php file to edit something i need and I see 2 strange lines!

$config['database']['hostname'] = 'localhost';
$config['database']['username'] = 'meganaso';
$config['database']['password'] = 'adriano92';

I never written that credentials. The username and password are also wrong.
I think my forum has been hacked so, but not defaced.
I hope my database has not been stolen.

What do you think about?
I should do something to repair the issue?
This pic show my plugins installed: http://goo.gl/JilVV
if they edited config.php then you have a sever level issue, not a MyBB issue most likely