Site Hacked

[ssslippy]

I recomend this, go through all your mods. See if they are in the graveyard. Update as needed. Also check your admin email for mysql errors.

[danielc2384]

Originally Posted by ssslippy

I recomend this, go through all your mods. See if they are in the graveyard. Update as needed. Also check your admin email for mysql errors.

I hadn't checked my email for a few days and just found that my inbox is full of sql errors.
At least 100 emails saying "vBulletin Database Error!".

The emails read:

"Database error in vBulletin :

mysql_connect() [<a
href='function.mysql-connect'>function.mysql-connect</a>]: Can't
connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
/home/********/public_html/dollhousetvforum/includes/class_core.php on line 311

MySQL Error :
Error Number :
Request Date : Thursday, June 12th 2008 @ 01:40:44 AM
Error Date : Thursday, June 12th 2008 @ 01:40:44 AM
Script : [B]http://www.dollhousetvforum.com/infernoshout.php[/url]
Referrer : http://www.dollhousetvforum.com/index.php
IP Address : *********
Username :
Classname : **********
MySQL Version :




Ok, I think we may be on to something.
"infernoshout.php" is a mod. Could that be causing the problem?

The latest message in the shout box was:



Shoutbox

Active Users: 0

Shoutbox Notice:
[Today 05:43 AM] *****:
[Today 05:42 AM] *****:
[Today 05:41 AM] *****:


That member (censored his name as ****) was banned by a moderator today.
He was the last person active in the shoutbox.
I'm guessing he did something through the shoutbox.



edit:

I just uninstalled the shoutbox and I am now receiving this email:

Database error in vBulletin 3.7.1:

Invalid SQL:

			select s.*, u.username, u.displaygroupid, u.usergroupid, u.userid, o.*
			from vb_infernoshout s
			left join vb_user u on (u.userid = s.s_user)
			left join vb_infernoshoutusers o on (o.s_user = s.s_user)
			where
			(
				(s.s_private = -1)
				OR
				(s.s_private = '1')
				OR
				(s.s_private <> -1 AND s.s_user = '1')
			)

			
			order by s.s_time desc
			limit 20;

MySQL Error   : Table '******_vbulletin.vb_infernoshout' doesn't exist
Error Number  : 1146
Request Date  : Sunday, June 15th 2008 @ 09:23:54 AM
Error Date    : Sunday, June 15th 2008 @ 09:23:54 AM
Script        : http://www.dollhousetvforum.com/infernoshout.php
Referrer      : ***************
IP Address    : *****
Username      : *****
Classname     : ******
MySQL Version : 5.0.45-community

[ssslippy]

There is no exploits that I know of infernoshout however I would recomend you update to the latest version.

If you are uninstalling it you should also remove all the files associated with it.

[danielc2384]

Originally Posted by ssslippy

There is no exploits that I know of infernoshout however I would recomend you update to the latest version.

If you are uninstalling it you should also remove all the files associated with it.

I don't think I'm going to bring it back since all my emails are linked to it.

I was running the 3.6 version of the mod. I then upgraded vBulletin to 3.7 and forgot to update the shoutbox. Not sure if that caused the problem.

Thanks for the help.

Much appreciated

[ssslippy]

I am part of the support team for infernotech and the mod runs fine however the 3.6 version which is no longer supported was not fully compatible with 3.7 due to the changes made in vb on how you could store options. Only issue I know of.

[danielc2384]

By reading this error code that was sent to my inbox, are you able to see what could have gone wrong with the shoutbox?

mysql_connect() [<a
href='function.mysql-connect'>function.mysql-connect</a>]: Can't
connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
/home/******/public_html/dollhousetvforum/includes/class_core.php on line 311

MySQL Error :
Error Number :
Request Date : Thursday, June 12th 2008 @ 01:40:41 AM
Error Date : Thursday, June 12th 2008 @ 01:40:41 AM
Script : http://www.dollhousetvforum.com/infernoshout.php
Referrer : http://www.dollhousetvforum.com/index.php
IP Address : *******
Username :
Classname : *******
MySQL Version :

[Scared56]

All I can figure out is that it isn't connecting to your mySQL database correctly.

Possible problems could be the information was not entered correctly or the mySQL process was down. (Process as in where it was being hosted)

[SEOvB]

Originally Posted by danielc2384

By reading this error code that was sent to my inbox, are you able to see what could have gone wrong with the shoutbox?

mysql_connect() [<a
href='function.mysql-connect'>function.mysql-connect</a>]: Can't
connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
/home/******/public_html/dollhousetvforum/includes/class_core.php on line 311

MySQL Error :
Error Number :
Request Date : Thursday, June 12th 2008 @ 01:40:41 AM
Error Date : Thursday, June 12th 2008 @ 01:40:41 AM
Script : http://www.dollhousetvforum.com/infernoshout.php
Referrer : http://www.dollhousetvforum.com/index.php
IP Address : *******
Username :
Classname : *******
MySQL Version :

your mysql server was down, not running, or lost its connection.

[Vackrick]

I Think U Got Ddos Attack

[danielc2384]

Thanks everyone for the info.

Question, if it was a Ddos Attack, is there a way of preventing them?