Thanks all for your replies,
@ Lynne:
Thank you for your suggestion, can you please tell what should I look for exactly at the access log? like what are the things that can point me to the vulnerable exploit on my forum. Also such changes on the database, can it be done by sql injection? without having access to the server, I have a shoutbox on the index.php page that was hacked, and it was the only page that was actually hacked + my supermods got demoted and 1 got deleted by the hacker itself. How can this be explained and can be done with other ways other than the server access? Can it be an exploit on the shoutbox since user actually do insert data on it?
|