MyBB Community Forums

Hey:

Some a-hole hacked a board for one of the sites I manage.

He replaced the index.php with his own index.php with his little message.

I overwrote his index.php with my own, but now I'm getting this message:

Direct initialization of this file is not allowed.

Please make sure IN_MYBB is defined.

What's the fix for this? Also, how I can find this moron's IP?

Check your server logs, and any logs for any upload services.
Can you post the link to your forum please?
Make an immediate backup of your files and database to your hard drive. If possible, you may also need the hacked index page.

Of course the index is not working, but here's the main section:

http://www.frankmccomb.info/board/forumd....php?fid=2

Make sure at the top of the INDEX.PHP file you have this (underneath the commented stuff at the top)

define("IN_MYBB", 1);

Dale Hay Wrote:Make sure at the top of the INDEX.PHP file you have this (underneath the commented stuff at the top)

define("IN_MYBB", 1);

After which part exactly?

At the very top?

Yeah, beneath this bit:

/**
 * MyBB 1.2
 * Copyright © 2006 MyBB Group, All Rights Reserved
 *
 * Website: http://www.mybboard.net
 * License: http://www.mybboard.net/eula.html
 *
 * $Id: index.php 3595 2008-01-09 00:10:57Z Tikitiki $
 */

So it should look like this:

/**
 * MyBB 1.2
 * Copyright © 2006 MyBB Group, All Rights Reserved
 *
 * Website: http://www.mybboard.net
 * License: http://www.mybboard.net/eula.html
 *
 * $Id: index.php 3595 2008-01-09 00:10:57Z Tikitiki $
 */
define("IN_MYBB", 1);

Thanks dudes. It helped.

How do you think this guy got in like that?

Here's a copy of the hackpage I save for future reference

http://www.frankmccomb.info/board/dispos.../index.php

Dardango Wrote:Thanks dudes. It helped.

How do you think this guy got in like that?

Here's a copy of the hackpage I save for future reference

http://www.frankmccomb.info/board/dispos.../index.php

There were multiple high risk vulnerabilities in 1.2.10 and 1.2.11 that if a person knew what they were doing, they could take over the whole website.

That's why it's always important to keep your Forums running with the latest version.

Dardango Wrote:How do you think this guy got in like that?

As DCR said it could be because you haven't updated to the latest version OR you gave out your FTP/Host CP settings to someone else.

Has anyone threatened to hack the board?

It says: I do what I say