MyBB Community Forums

my site got hacked today and admin pass was changed. I moved my admin directory back when i made the site. I can't log in any way i can get the pass back?

UPDATE `mybb_users` SET `password` = '098f6bcd4621d373cade4e832627b4f6', `salt` = '' WHERE `uid` = '1';

Change your UID if it isn't 1, then login with test as the password.

alright thanks that worked perfect but what are some other things i could do to prevent this from happening again? I have no clue how they accessed the site in the first place and logs from the admin panel were cleared. i have moved admin directory and pass protected it.

It's called SQLi, its an exploit to your database, not to sure on how to fix it on MyBB but they can access your database then get the passwords (after decrypting them) Anyway you can search around for help fixing it.

There aren't any known SQL injection exploits in MyBB.

Ask your host if they have any more info on what happened.

There can be exploits through certain plugins.

(2010-05-23, 05:49 PM)xHtmlPhP Wrote: [ -> ]There can be exploits through certain plugins.

For example in MyPS. There are many security issues.

(2010-05-23, 08:27 PM)magent Wrote: [ -> ]

(2010-05-23, 05:49 PM)xHtmlPhP Wrote: [ -> ]There can be exploits through certain plugins.

For example in MyPS. There are many security issues.

yeah the only one i could see being a problem would be the userbar plug-in. idk if there are any known exploits with this but all my other plug-ins are from labrocca and i'm pretty sure if any of his were security issues hackforums would be attacked pretty fast lol. but i'm going to re-rename the admin directory as well as password protect it, and disbale any plug-ins that could possible be a problem. The only other thing it could really be mightbe a keylogger.

i think you may forget to sign out while using Admin Acc/ from any Internet Cafe....

(2010-05-23, 08:27 PM)magent Wrote: [ -> ]

(2010-05-23, 05:49 PM)xHtmlPhP Wrote: [ -> ]There can be exploits through certain plugins.

For example in MyPS. There are many security issues.

Actually there is just one low level XSS. Please use facts.