I've been hacked!!!!

  Post new topicReply to topicPrintable Version
<< View previous topic View next topic >>
Share: Del.icio.us  Digg  Google  Spurl  Blink  Furl  Y! MyWeb  
#1   I've been hacked!!!!
Turbo
CZ Super Newbie
Turbo has been a member for over 20 year's 20 Year Member
usa.gif maine.gif
Website:
Status: Offline
Joined: Jan 06, 2004
0.01 posts per day
Posts: 63
Points: 6,985
   
I've been hacked by some russian punks! I'm runnning nuke 6.9- When I first installed I changed the site key like it suggested..... I assume they cracked my administartor password..??
I cant seem to figure out how to change it, any suggestions??

When I was hacked I was logged on as administrator while working on my site-


It appears all they did was 'announce" that I was hacked, I don't see any other problems.....yet!!

thanks for any help--




_________________
Back to top Reply with quote
#2   re: I've been hacked!!!!
echo
CZ Wiz
 Codezwiz Site Donator
Gender: Male
Status: Offline
Joined: Oct 04, 2003
0.15 posts per day
Posts: 1147
Points: 93
   


Go to your database and look in the nuke_authors table. Check to see if there are any new admins listed. Delete the new ones that you do not know about. If you want to be thorough, empty the contents of that table. DO NOT delete the table, just empty the contents. Then log in again using admin.php and you will need to create a new God admin account. You can use the same name, but you may want to make a new password.

[ Register or login to view links on this board. ]

Make sure your all patched up: [ Register or login to view links on this board.]

Also install either:

[ Register or login to view links on this board.]

or

[ Register or login to view links on this board.]



Back to top Reply with quote
#3   re: I've been hacked!!!!
Turbo
CZ Super Newbie
Turbo has been a member for over 20 year's 20 Year Member
usa.gif maine.gif
Website:
Status: Offline
Joined: Jan 06, 2004
0.01 posts per day
Posts: 63
Points: 6,985
   
thanks a bunch echo--Telli
that puke created another super user, i just deleted that record from the database as suggested-

by nuke fixes you mean upgrading from 6.9 to the current version??
I've been meaning to do that but I have been weary of creating problems I couldn't fix, but i guess its time to bite the bullet and get it done!!

thanks again codewiz, you guys are the best!!

Tim




_________________
Back to top Reply with quote
#4   re: I've been hacked!!!!
echo
CZ Wiz
 Codezwiz Site Donator
Gender: Male
Status: Offline
Joined: Oct 04, 2003
0.15 posts per day
Posts: 1147
Points: 93
   
What I meant was to make sure your Nuke 6.9 had all the security patches in place. If you plan on upgrading to the newer Nuke version Telli has a patched 7.4 version here in the downloads section. Good luck whatever your choice.
echo



Back to top Reply with quote
#5   re: I've been hacked!!!!
Kelly_Hero
PayPal Donation
CZ Revered Member
 Codezwiz Site Donator
usa.gif southcarolina.gif
Occupation: Web Developer
Age: 59
Gender: Female
Website:
Status: Offline
Joined: Aug 20, 2003
0.48 posts per day
Posts: 3765
Points: 351,412
   
If you're gonna go all out and upgrade, might as well shoot for a custom theme right? icon_wink.gif



Back to top Reply with quote
#6   re: I've been hacked!!!!
Turbo
CZ Super Newbie
Turbo has been a member for over 20 year's 20 Year Member
usa.gif maine.gif
Website:
Status: Offline
Joined: Jan 06, 2004
0.01 posts per day
Posts: 63
Points: 6,985
   
you read my mind icon_smile.gif ....... I'm really hoping to do something for my site for the 2005 season-- I promise you guys will get the job when i can make it work eusa_pray.gif
How much notice would you like for a Jan 1st launch?




_________________
Back to top Reply with quote
#7   re: I've been hacked!!!!
Kelly_Hero
PayPal Donation
CZ Revered Member
 Codezwiz Site Donator
usa.gif southcarolina.gif
Occupation: Web Developer
Age: 59
Gender: Female
Website:
Status: Offline
Joined: Aug 20, 2003
0.48 posts per day
Posts: 3765
Points: 351,412
   
Anytime you're ready....I already have a theme started for you remember? ...to match the header I did for you..unless you plan on chaninging that. Just say the word when you're ready to go. icon_biggrin.gif



Back to top Reply with quote
#8   re: I've been hacked!!!!
dobbelina
CZ Super Newbie
dobbelina has been a member for over 20 year's 20 Year Member
Status: Offline
Joined: Jul 10, 2004
0.01 posts per day
Posts: 58
Points: 3,836
   
I've been hacked to by some Russians !
This was a long time ago when i was using spaiznuke though.
Nowadays i've changed to phpnuke,latest patched version,and i got
Sentinel installed as well.
Being hacked once makes you really alert to security issues.
Also if you have the webmail module installed,delete it totally !
Dobbelina icon_biggrin.gif



Back to top Reply with quote
#9   re: I've been hacked!!!!
Turbo
CZ Super Newbie
Turbo has been a member for over 20 year's 20 Year Member
usa.gif maine.gif
Website:
Status: Offline
Joined: Jan 06, 2004
0.01 posts per day
Posts: 63
Points: 6,985
   
ARRGGGGG!!!!! I got hit again, this time worse-- I deleted the new super users, along with myself- when I log into admin.php it says I need to creat another super-user(expected), when I hit submit it redirects to the admin login page- I put in my new info and it just keeps redirecting to that page, no errors or anything. It's like its not accepting my info-

Thinking some files were corrupted I tried uploading the following: admin.php index.php module.php config.php- this has no effect........

Currently I took my site down by removeing those above files till i figure this mess out,
I'm looking for a easy fix until i have the time to do a fresh install with the latest nuke, any ideas why I can't use the new super-user I just created? (i've deleted and re-tried 4-5 times)




_________________
Back to top Reply with quote
#10   re: I've been hacked!!!!
Turbo
CZ Super Newbie
Turbo has been a member for over 20 year's 20 Year Member
usa.gif maine.gif
Website:
Status: Offline
Joined: Jan 06, 2004
0.01 posts per day
Posts: 63
Points: 6,985
   
I have managed to regain control of my site, but it appears the punks deleted my content and forums....

I would like to do a fresh install (latest CZ version) but i would rather not have to ask my members to re-register...... so im thinking i need to do the upgrades...???

My question is: if I do the upgrades, 6.9-7.0 7.0-7.1 7.1-7.2 etc....
does that do the security fixes also??




_________________
Back to top Reply with quote
Display posts from previous:      
Add To: Del.icio.us  Digg  Google  Spurl  Blink  Furl  Y! MyWeb  
<< View previous topic View next topic >>
Post new topicReply to topic

Jump to 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum