Justinphx
12-03-2013, 04:34 AM
Last night my server/vbull was hacked I believe.
The following files had redirects in them to forum/install/install.php.
===
/forum/readme.txt
/forum/includes/init.php
/forum/includes/class_core.php
/forum/includes/class_core.php.bak
/forum/admincpsecure/diagnostic.php
/forum/admincpsecure/global.php
/forum/class_core.bkU
/forum/vb4_readme.html
/forum/vb4_readme.txt
/forum/forum.php
I do not have a /install directory as it was deleted/removed some time ago. However, a hidden directory was suddenly there last night - it did not have any files in it though so all the redirects were going to the non-existent install.php file which resulted in a 404 - file not found - error.
This was a real mess and I ended up restoring a full backup. After that all was fine and the hidden /install directory was no longer present.
I am running V4.1.12 patch 4 and wondering if this is a known issue and it there is a patch. I password protected the /install directory using .htaccess.
The following files had redirects in them to forum/install/install.php.
===
/forum/readme.txt
/forum/includes/init.php
/forum/includes/class_core.php
/forum/includes/class_core.php.bak
/forum/admincpsecure/diagnostic.php
/forum/admincpsecure/global.php
/forum/class_core.bkU
/forum/vb4_readme.html
/forum/vb4_readme.txt
/forum/forum.php
I do not have a /install directory as it was deleted/removed some time ago. However, a hidden directory was suddenly there last night - it did not have any files in it though so all the redirects were going to the non-existent install.php file which resulted in a 404 - file not found - error.
This was a real mess and I ended up restoring a full backup. After that all was fine and the hidden /install directory was no longer present.
I am running V4.1.12 patch 4 and wondering if this is a known issue and it there is a patch. I password protected the /install directory using .htaccess.