PDA

View Full Version : Old site owner is getting into Admincp


bremereric
04-10-2012, 06:39 PM
The previous site owner is set up a registered user. He was once the admin. The last two times he signed in I could see that he was using the Admin Control panel. How could he be hacking his was in or was there something I missed when I took his admin away. He does not show up as a site leader or moderator. Thanks, Eric

SEOvB
04-10-2012, 06:40 PM
Did you delete his userid from the includes/config.php under the "Super Administrators" section?

-Nick, SEOvB Developer

bremereric
04-10-2012, 07:14 PM
Did you delete his userid from the includes/config.php under the "Super Administrators" section?

-Nick, SEOvB DeveloperNope I forgot that I had to add my user id in there to get certain things. Let me go and try. Thanks.

SEOvB
04-10-2012, 07:16 PM
Sure thing :)

-Nick, SEOvB Developer

bremereric
04-10-2012, 08:23 PM
Okay I edited the config.php and took user id 1 out of a special sections. I added myself in to access the admincp log viewer. I scrolled through severel pages of logs and his username was nowhere to be found?

ForceHSS
04-10-2012, 08:29 PM
also if you have a htacess and htpasswd file make sure remove his info from that if you dont have these file you should make them

bremereric
04-11-2012, 03:54 PM
Okay someone hacked the previous owners password and was attempting to get into the admincp. I know who it is and then he decided to log on yesterday afternoon and start to edit alot of the previous owner's post. I had fun last night reverting the database back to Monday 11:30 Pm. I changed the previous owner's password and that fixed it. Now my question is do I have a legal recourse to go after the person that hacked my site?

SEOvB
04-11-2012, 03:59 PM
Okay someone hacked the previous owners password and was attempting to get into the admincp. I know who it is and then he decided to log on yesterday afternoon and start to edit alot of the previous owner's post. I had fun last night reverting the database back to Monday 11:30 Pm. I changed the previous owner's password and that fixed it. Now my question is do I have a legal recourse to go after the person that hacked my site?
That sounds like hell. Quick answer: In all probability, you do have legal recourse. The only question is, do you still have the edited posts and logs of that user, can you identify them IRL, and do you have the time to pursue it? Probably small claims court, but very difficult if they live very far from you.

-Nick, SEOvB Developer

ForceHSS
04-11-2012, 05:10 PM
no point in taking this to court for someone editing a post you would get nothing just ban his ip on the server level

SEOvB
04-11-2012, 06:11 PM
no point in taking this to court for someone editing a post you would get nothing just ban his ip on the server level
You could probably sue for punitive damages and the time you had to spend reverting the forum... But yeah, putting the lawsuit together wouldn't be worth the time.

bremereric
04-11-2012, 10:51 PM
This was a malicious ower of another site. Short story is I made him pay back someone 8500 dollars that he had for over two years. He had the previuos owners password from his website. The minimum I will do is have my lawyer draw up a cease and discist demand letter and warn him of futher actions. He edited like fifty posts and I believe all posts are the property of my website.

ForceHSS
04-12-2012, 01:34 AM
just ban his ip range