MyBB Community Forums

Full Version: Upgrade fail after hack-attack
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
I am having troubles upgrading from 1.4 at http://www.livinlowcarbdiscussion.com

This morning, the site was hacked, redirecting people to download a pdf from realmadrid.su

When I started sniffing around, I saw that 1.6 was out and assumed the hacking was due to a known exploit in the old code. I decided to try fixing the problem with an upgrade.

I followed the instructions for upgrading, but between steps 6 and 7:

6 Go to www.yourdomain.com/forumfolder/install/upgrade.php

7 You will see a drop down list asking what version of MyBB you're upgrading from. Be sure you select the correct version you are currently using or else the upgrade will not work correctly or completely!


I encountered the following:
Quote:Warning: require_once(/home5/grassho2/public_html/locarbforum/inc/config.php) [function.require-once]: failed to open stream: No such file or directory in /home5/grassho2/public_html/locarbforum/install/upgrade.php on line 41

Fatal error: require_once() [function.require]: Failed opening required '/home5/grassho2/public_html/locarbforum/inc/config.php' (include_path='.:/usr/lib64/php:/usr/lib/php') in /home5/grassho2/public_html/locarbforum/install/upgrade.php on line 41

I don't really understand all that, but obviously something is missing. I checked out all the paths mentioned in that message and saw that while:

.../locarbforum/inc/config.php

does NOT exist,

.../locarbforum/inc/config.default.php

does.

So, should I simply rename the file in question, or do I need to change something else? Conversely, are my problems much larger in scope than I fear?

Thanks in advance for any help you can offer,

-KKS
What process did you take when uploading your new files?? If config.php is gone you must have deleted some files which isn't necessary. You'll need to rename it to config.php and rebuild it with this: [wiki]Inc/config.php[/wiki]

Is your forum in / or /locarbforum/ though?? You've got two... one of them probably still has a config.php...
Ninja'd!! Toungue
(2010-09-12, 08:38 PM)MattRogowski Wrote: [ -> ]What process did you take when uploading your new files?? If config.php is gone you must have deleted some files which isn't necessary. You'll need to rename it to config.php and rebuild it with this: [wiki]Inc/config.php[/wiki]

Is your forum in / or /locarbforum/ though?? You've got two... one of them probably still has a config.php...

The process used was this (step 2 of the upgrade instructions):

Quote:Upload ALL of the files and folders in the "Upload" folder including the install folder, overwriting the existing copies (this contains the upgrade files also) to your forums root directory.

When copying up, I selected the ftp option to replace rather than merge.

/locarbforum is the root directory for that domain (from FTP) and that is where the forum is installed.


So, I recreated the config.php and updated:

$config['database']['type'] = 'mysql';
$config['database']['hostname'] = 'localhost';
$config['database']['username'] = 'mysql-username';
$config['database']['password'] = 'mysql-password';
$config['database']['database'] = 'database-name';
$config['database']['table_prefix'] = 'mybb_';

to the values my hosting company assures me are correct.

But now I get this:


Quote:Fatal error: [SQL] [1045] Access denied for user 'REDACTED'@'localhost' (using password: YES)
[READ] Unable to connect to MySQL server in /inc/db_mysql.php on line 550

Thoughts?
You must have an odd FTP client setup if uploading files removes any files that exist on the server but don't exist in the files you're uploading.

If you're getting that, your database details aren't right; check with your host again.
(2010-09-12, 10:17 PM)MattRogowski Wrote: [ -> ]You must have an odd FTP client setup if uploading files removes any files that exist on the server but don't exist in the files you're uploading.

If you're getting that, your database details aren't right; check with your host again.

Well, I was hacked, after all. I made a backup before attempting the upgrade, and the config was missing there, too.

I'll contact my host again in the AM, when they have a different tech on duty.
Just a final word, yes the credentials were wrong. The tech at bluehost pulled them from the users table in the database, rather than the SQL user/password.

It's all good now, and thanks for your help, folks!