Please help ASAP I am being hacked AGAIN!
 

Somehow I have a member who is getting into the admin cp and changing stuff.

it started subtly by changing a letter in a forum NFL FORUM to NLF FORUM so that it would not work. now i log into the admin cp and this guy has made himself an ADMIN!

please help! what can i do? i feel helpless!!

Pull the plug for now.

how so? if i turn it off he apparently has been able to hack into the admin cp... i change my password hourly to a random sequence of letters and numbers...

this is insane.

Does he have access to your Admin panel or to your database? I would password protect the admin panel (htaccess) and also password protect your cpanel/phpMyAdmin. And, change the password to login to ftp.

Ban him and turn off new registrations until you get it figured out.. if he can get back in even after the registrations are turned off and he is banned, then he's got access to cpanel/phpmyadmin. If he can't, he's only got access to the Admin CP and you need to change some passwords.

Please read the following thread on how to improve security for your board:
http://www.vbulletin.com/forum/showthread.php?t=194701

get his ip and ban him from the cpanel

It is not so easy.. becoz he can use the proxy so how will u ban u and he will register under new user name. am i correct.

maybe so but you will get him out of the system and thn just tighten your security

remove tools.php from one of your folders..forgot which. That is probably your problem...I believe it should be in your admincp folder..remove it.

Unless he's changed the filename of tools.php, he shouldn't even be able to access the AdminCP; he'll be presented with a security warning stating as much.

He hasn't come back to post in this thread in several days, so I would assume he fixed the problem.

You might have a keylogger, so don't login to your host cPanel then he'll be able to unban himself.