This is a long, convoluted thread and I'm about to get offline to run some errands so I apologize if this is an unhelpful suggestion.
When my site was hacked this morning all they did (besides create the ADMIN account) was add a NOTICE through the ADMINCP that had HTML code embedded in it.
I found one SQL table entry for the notice and edited that but when I reactivated the forum the redirect still loaded. So then I just logged in to the ADMINCP and edited the notice.
|