Codezwiz >> Forums >> General PHP Nuke Help >> Admin Access Denied can u help us?

Hi, we have been running a clan site for 12months now and earlier this week we got hacked. The hackers deleted a few of our admin accounts as well as doing other annoying stuff.

Our super user and one admin account is still intact.

BUT

We cant access the EDIT ADMIN part of our site, we get access denied all the time. We need to set up a couple more admin accounts and change the password for the existing ones.

Is there any advice you can give us??

We have just installed sentinel and are running at the lastest upgrade for our version of Nuke. (7.8 ) we plan to downgrade this shortly.

Thanks

Littlemouse

I honestly don't know the answer to that. So I did a little research.

Did you check this before installing sentinel?
Did you try removing your .htaccess file from server?

If yes, lets try this

Re-upload these files from whatever nuke version your running for starters. Overwrite the old as they might of been altered in some form.

root/admin/case/case.authors.php
root/admin/links/links.editadmins.php
root/admin/modules/authors.php

Lets start fresh, let me know if that works.

Thanks I will try that.

Yes the problem existed before we installed sentinel.

Not sure I will ask the other admins about the other question

Hi.. That worked great.. Thankyou...

We have another small prob. We have lost the ability for members to log in or out. We just get a white screen when we click on the "LOGIN" button.

in the mean time, I will hit it with a hammer..

I will be looking for the reason elsewhere... I really appreciate your help, and don't want you to do research again.... Only if you know..

thanks again

I passed on what you said to DJ > he is one of our admins, and knows far more than I.

He switched of sentinel and over wrote those files and the admin part works wonderfully.

Thankyou so much for that help.

Plus what he said up there ^^^^^

Also if you click on "Your Account" blank white page as well.

Is there some files we can overwrite to fix this like the admin?

Register

If you remember your superadmin's password you can copy the same encrypted password ( by copy and pasting the code in the password column thru phpmyadmin ) into the author's column to. You can now log in to your nuke admin panel with your normal username and the old admin password. The other thing you need to do is to see all of your user's (that are admins) level to 2 in the nuke_users table and no one else.

You can do this thru phpmyadmin by clicking on Operations then Search and put in '2' in the user_level field for search criteria.

Once you get the authors table and also do a scan for any other users in the nuke_users table that may have a level of 2 and delete the ones that don't belong there and make sure that you and your other admins are the only ones in the nuke_authors table and are the only ones with a user_level of 2, you are now back to normal and can double check everything again and re-add any admins that are missing from your admin panel.

Finally, make sure your nuke sentinel is upto date! If you don't have sentinel installed and upto date you are asking for trouble because the code to change, delete or edit admin info is very easy without it.

Hope this helps

Thankyou.. I will check the database as u suggested for any hidden nastey bits..

ok, found the login prob

/public_html/modules/Your_Account/index.php

its a file that was edited with Sentinel. I have installed the Back up till I check the code..

A lot of people are having problems with that sentinel / Your account snipplet. My suggestion is to switch to CNBYA. Its doesn't have that same security issue and gives you a lot more options as an admin.

I think you can fine it at.
[ Register or login to view links on this board. ]