Your host said the URL to kcfinder was:
But there is no /kcfinder/ directory in this mod's zip file... Not sure how or why you have a /kcfinder/ directory but it doesn't appear to be included with this mod.

So BOP, when I was hacked by TH3 HACK3R could they have installed it in the cart then? I saw a reference to Black Hack3r in files. I have tried to uninstall this mod but it crashed my site so I have isolated it. I wish Michael would reply as this is really stressing me out

It's certainly possible... I would suggest anyone with this mod installed check for a /kcfinder/ directory in their /microcart/ directory, just to be sure.

At this point all I know for sure is /kcfinder/ does not come as part of this mod. I can't say whether an exploit in this mod allowed it to be uploaded or an exploit it something else did.

I got smashed 5 times BOP, my database is still psychopathic. have a look if you like...PLEASE!!!

I would suggest you look for .php files in the following directories- I've found them in these directories while cleaning up hacked sites before (check all sub-folders of these folders as well)-

/customavatars
/customgroupicons
/customprofilepics
/images
/signaturepics

If you have attachments stored in a web accessible location check that folder too.

These folders should not contain .php files.

As for being in your database the only real place they could be is in a plugin. Check and make sure you don't have any plugins listed in Plugin Manager (not product manager) at the top listed under the "vBulletin" product. If you do make sure these are plugins you created yourself and double-check the code. This is the most often exploited spot.

Second most exploited in my experience is hidden as a plugin of Forum Runner but this will be cleaned if you re-run the upgrade script which I recommend you do if you've been hacked.

Any 3rd party products should be re-installed after a hack to make sure their plugins are the original values and don't contain backdoors left by the hacker.

Thank you so much mate, awesome

Hello,

Regarding the post about:

The fix I use is, go to: Admin CP > Settings > Options > Site Name / URL / Contact Details
In the 'Redirect Domain Whitelist' field, add:
<a href="https://www.paypal.com/" target="_blank">https://www.paypal.com</a>
<a href="https://www.sandbox.paypal.com/" target="_blank">https://www.sandbox.paypal.com</a>


I have implemented this and still receive the following error

Invalid Redirect URL (https://www.paypal.com/cgi-bin/websc...ethod%3Dpaypal)

please see screenshot

http://tinypic.com/r/25icgtk/8

Thank you

Daniel

Hello,

After the install I 'am only accessing the index page. Please see the attachment. Any solutions?

Thanks in advance.

cart.php and cart_gateway.php need to be in the same directory as forum.php

for me its /public_html

see if thats the answer

Thanks for the reply. I've moved the files, not seeming to have any effect.

Thanks again.