Not Solved [Security] i can not recover my admin password.
#1
Not Solved
Hi 

my site was hacked several days ago, i tried to use  this code in PHPMYADMIN
UPDATE `mybb_users` SET `password` = md5('test'), `salt` = '' WHERE `uid` = '1';

and 

also tried this 
UPDATE `mybb_users` SET `salt` = '', `password` = '098f6bcd4621d373cade4e832627b4f6' WHERE `uid` = '1';

The mysql showed the execute success, but i still can not login it. 

also "admin" login, showed:

Your account is currently locked out after failing to login 5 times. You have been sent an email with instructions on how to unlock your account.

And i tried this code, but it does not work.

UPDATE `mybb_adminoptions` SET `loginattempts` = '0', `loginlockoutexpiry` = '0' WHERE `uid` = 'X'; 

whats happened ?
how to solve this problem?

URL: www.rice21.com

Thank you.
Reply
#2
Not Solved
This happened to me, and I also thought I was hacked, in the end, it was me doing something dumb, because I couldn't log in and got locked out, I remember getting the email and the instructions worked, did you get the email with the instructions?
Hey man, what's up?
Reply
#3
Not Solved
(2018-08-14, 04:22 AM)Michael2014 Wrote: This happened to me, and I also thought I was hacked, in the end, it was me doing something dumb, because I couldn't log in and got locked out, I remember getting the email and the instructions worked, did you get the email with the instructions?

i did not get any email with the instructions. i think that MYBB should have some bugs of the security section.
Reply
#4
Not Solved
once again try using below SQL queries
UPDATE `mybb_adminoptions` SET `loginattempts` = '0', `loginlockoutexpiry` = '0' WHERE `uid` = '1';
UPDATE `mybb_users` SET `salt` = '', `password` = 'actualRequiredPassword' WHERE `uid` = '1';
Reply
#5
Not Solved
(2018-08-14, 05:27 AM).m. Wrote: once again try using below SQL queries
UPDATE `mybb_adminoptions` SET `loginattempts` = '0', `loginlockoutexpiry` = '0' WHERE `uid` = '1';
UPDATE `mybb_users` SET `salt` = '', `password` = 'actualRequiredPassword' WHERE `uid` = '1';

i tried 
 0 rows affected. (Query took 0.0003 seconds.)
UPDATE `mybb_adminoptions` SET `loginattempts` = '0', `loginlockoutexpiry` = '0' WHERE `uid` = '1'

 0 rows affected. (Query took 0.0004 seconds.)
UPDATE `mybb_users` SET `salt` = '', `password` = 'test' WHERE `uid` = '1'
it seem does not work
Reply
#6
Not Solved
(2018-08-14, 07:28 AM)gunrose2003 Wrote:
(2018-08-14, 05:27 AM).m. Wrote: once again try using below SQL queries
UPDATE `mybb_adminoptions` SET `loginattempts` = '0', `loginlockoutexpiry` = '0' WHERE `uid` = '1';
UPDATE `mybb_users` SET `salt` = '', `password` = 'actualRequiredPassword' WHERE `uid` = '1';

i tried 
 0 rows affected. (Query took 0.0003 seconds.)
UPDATE `mybb_adminoptions` SET `loginattempts` = '0', `loginlockoutexpiry` = '0' WHERE `uid` = '1'

 0 rows affected. (Query took 0.0004 seconds.)
UPDATE `mybb_users` SET `salt` = '', `password` = 'test' WHERE `uid` = '1'
it seem does not work

See this prefix? mybb_ That's the default prefix that MyBB uses during the first installation.

Are you using the SAME prefix or are you using a different prefix for your database?

When you are in the SQL query, double check to make sure you're using the correct prefix.
I'm Serpius and You're Not    ¯\_(ツ)_/¯
Deaf Golf
Reply
#7
Not Solved
Serpius has a valid point.

perhaps its better to manually register a new user account (by using another working email account)
and temporarily change its user group to admin group, login to forum admin panel & change password
of the main admin
...

UPDATE `mybb_users` SET `usergroup` = '4' WHERE `uid` = 'X'; 
Reply
#8
Not Solved
(2018-08-14, 07:37 AM)Serpius Wrote:
(2018-08-14, 07:28 AM)gunrose2003 Wrote:
(2018-08-14, 05:27 AM).m. Wrote: once again try using below SQL queries
UPDATE `mybb_adminoptions` SET `loginattempts` = '0', `loginlockoutexpiry` = '0' WHERE `uid` = '1';
UPDATE `mybb_users` SET `salt` = '', `password` = 'actualRequiredPassword' WHERE `uid` = '1';

i tried 
 0 rows affected. (Query took 0.0003 seconds.)
UPDATE `mybb_adminoptions` SET `loginattempts` = '0', `loginlockoutexpiry` = '0' WHERE `uid` = '1'

 0 rows affected. (Query took 0.0004 seconds.)
UPDATE `mybb_users` SET `salt` = '', `password` = 'test' WHERE `uid` = '1'
it seem does not work

See this prefix? mybb_ That's the default prefix that MyBB uses during the first installation.

Are you using the SAME prefix or are you using a different prefix for your database?

When you are in the SQL query, double check to make sure you're using the correct prefix.
I did not change any prefix before.

(2018-08-14, 07:49 AM).m. Wrote: Serpius has a valid point.

perhaps its better to manually register a new user account (by using another working email account)
and temporarily change its user group to admin group, login to forum admin panel & change password
of the main admin
...

UPDATE `mybb_users` SET `usergroup` = '4' WHERE `uid` = 'X'; 

I tried to registered a new user account, but the problem is that i can not find my new account id/UID in "mybb_users",
Whats happened ?
Reply
#9
Not Solved
have a look at your new user account's profile & hover mouse pointer over sending email / pm link
that gives your new user account's uid [uid = 774]
UPDATE `mybb_users` SET `usergroup` = '4' WHERE `uid` = '774'; 
Reply
#10
Not Solved
(2018-08-14, 10:57 AM).m. Wrote: have a look at your new user account's profile  & hover mouse pointer over sending email / pm link
that gives your new user account's uid [uid = 774]
UPDATE `mybb_users` SET `usergroup` = '4' WHERE `uid` = '774'; 

Hi m,

It showed:
 0 rows affected. (Query took 0.0003 seconds.)
UPDATE `mybb_users` SET `usergroup` = '4' WHERE `uid` = '774'
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)