My Site Hacked Redirected?! Got Damn!
 

....... www.offthaave.com/forums OTA 4 DAYZZ! We still runnin strong on you lames!

They may have added a Meta Redirect, check your headinclude template I believe.

Do you have the topXstats mod installed ?

i'm new to all this so please be as exact as you can acid. Walk me thru to what i would have to look for.

Thanks 4 the quick reply

yes @ Paul M.. i was just reading your other post a few threads down. I dont get it though, yes i have it, but what do i do now?

Paul is probably right on this one, I know a lot of people have been recently getting this problem as they've installed Top X Stats or Cyb Top Poster.

Download the latest version whichever you have; they should be patched.

Actually, it looks like your index.php file may have been replaced, upload the original vbulletin index.php from your zip file.

Nope @ Paul M. restored original index.php and it still re-directs!!!!!! what now??

Check to see if there is a .htaccess file on your server.

Try disabling all your plugins by adding this line to your config.php

define('DISABLE_HOOKS', true)

Check to see if a redirect has been added to your .htaccess file; most people already have one on their server.

yeh, i have the myspace profiles up and the .htaccess is in the forums root. But i just tried deleting that and no good.. Paul M, i'll try disabling the hooks like you said and see what happens

*************************************

well do i have to put
in a certain place? cuz i put it below the first two boxes and nothing.... still re-directs to that lame @$$ site. WHat's next?

and for the .htaccess file on my forum root, this is the only thing in it

Sorry, there is nothing else I can tell you, it looks like you will need to give someone access to your site to investigate where the redirect is coming from.

ok, well who do i give access to the site because you can't even login thru admin cp? should i try to alert my host administrator or what?

anyone that ;

1. You trust.
2. Knows what they are doing with respect to vbulletin.

No, check to see if you have a .htaccess file in your public_html directory not forums directory.

You can get to his acp login page up okay, so I don't think it's an htaccess file anywhere.

well.. i just filled out a support ticket @ vbulletin.com .. but i mean, if i can't log on thru admin cp, what good will it do giving some1 out my info like that?

read this post https://vborg.vbsupport.ru/showpost....69&postcount=6

question to Paul

what does the Top X Poster do to the site?

Well if paul dosen't answer you can find more description of it here

https://vborg.vbsupport.ru/showthrea...&highlight=top

i have one similar to that on my site by Cyb

it works just fine with no problems at all, i had it for months now

but this site hack thing got me scared LOL

yea its happened twice to the forum i admin and code for. so i divised my own fix that the vbull developers think is stupid

What was your fix Wild-Wing?

go up to post # 19 and click that link its the best solution i think

well, i think i MIGHT know what its coming from. Lets say if you had illegal content on your site (music downloads) and a company sent you a e-mail twice, but you didn't end up checkin your mail till the day your site is down, could they tell your domain to foward your site to another one? I'm willin to work with this buisness cuz they said they would let me take down the music, but how the f*ck am i goin to do it if i can't get on. So i e-mailed these jackasses back askin them what they did and they need to put my site back cuz i can't do anything if i can't even get into the admin cp.

On top of that, these @$$holes coulda had it re-direct to there own site, but they have it sent to another forum.... b*tches

listen i had the same problem go to your admin cp disable your forum. Go to the last reg user delete that because that will be the hacker that registered and then disable all plugins from there go to the thread that the script was injected then then delete the post and take it from there and install new patch for topxstat that's where the problem with me was.And turn plugin back on and you will be ok

check all your forum postings.

You probably got hit with a meta refresh in a thread title.

if you need help let me know

The mod by cybernetic had a security hole in it until last week when he updated it.

That'll do it to :darnkids:

lol you guys are skipping the important part, i CANT access admin cp. I can get into the log in screen but when i log in, it goes to that stupid ass site. And you can access my homepage via www.offthaave.com but you can't access the forums without it re-directing!

i saw that one of the user say to replace the index.php now in admincp it also has a index.php try to replace it and try again

also go to the topXstat.php and change the extension to wat ever.

^^ well i replaced the index.php in the admin cp and no go.... and i can't find the directory where topXstats.php goes.. help?

heres what you do go to your site ie http://www.yoursite.com/forum/usercp.php then go to new posts and delete the thread

man ok the topXstst should be in your forum directory that if you have it installed

most likely the root directory of the forums

get phpmyadmin and look in your templates table and search for the header include template delete the meta redirection in it

its either a meta redirect, or a .htaccess which will be in the web root

well if it was a .htaccess redirect the whole site would redirect

well still can't get on. Butters is trying to help me.. but unfortunately, my site is still redirected hacked :(

I've just tried and can get to your admincp just fine.

Go directly to the URL for your admincp NOT to your forums first.