MyBB Community Forums

Full Version: How to check if my forum has a backdoor?
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
I've received some threats that my forum has a backdoor. How do I find it and remove it?
- Run the File Verification tool and check any modified PHP files at show up there
- With FTP or similar, check each directory for extra files not in the MyBB package. Download a fresh copy of MyBB to be able to compare side-by-side. Any files that aren't in a core install of MyBB should be checked for safety.
- Check inc/config.php and inc/settings.php, as people have sometimes had backdoor code pasted at the bottom, which loads on basically every page since config.php and settings.php are used all the time.

If you need help doing this, post a thread in Private Inquiries, or you can PM me. Either one works.