Quote:
Originally Posted by squidsk
The reason likely is you haven't deleted your install directory as that is the most common reason for forums being hacked and if you didn't follow the email and admincp instructions from vbulletin then you were vulnerable and got hacked.
The exploit of this mod in question was fixed in version 4.0.4. If you get base64 results it isn't in the default installation, which you could have easily checked by downloading a fresh copy of the mod searching the file contents for base64. Since it has been added to the plugins for this mod you can safely assume that whoever hacked your site added it there.
|
of course i have been deleted all install folder and secure many stuff in vb. still not sure how they did. we are looking.
So in this case , i had using the v3 of this mod. after upgraded to vb v4 i have updated this mod too but of course upgraded , not a fresh install as i dont want to lose the saved awards and ... . what is ur suggestion in this case to get rid of those mysql query results ?
Thanks in advance