Database error

[Bladed]

The error I listed is from the upgrade attempt. So i think the database is pretty much trash. I fear it has some (read as a lot of) bad code left from the hackers, and i don't know much about mysql to be able to fix that.

I think my best bet is to start from scratch, and properly set up vb so it is secure from the get go.

[tbworld]

Originally Posted by Bladed

OK, so basically because of the extent of this hack and malware, I really need to start from scratch, as this would be the most effective way of cleaning the site up.

I just took this forum over and from what I can tell this "backdoor" in has been there for quite a while. a good number of things like the admincp had not been secured against intrusion.

Most sites can be restored unless the database is corrupted or deleted. For most people starting over is really not a choice as the existing threads to a forum is everything.

If this is overwhelming for you, you might want to seek paid help to get you healthy and secured.

[Bladed]

Well I can't afford "paid" help, so I have to fix it. Fortunately The forum was small and we've only had vb for a year or so. In the previous incarnation different bulletin board products had been used and had to been started over from scratch.

My users were told by the previous owner he was shutting it down for good, until I told him I'd take it over. I should have expected that the problems behind the curtain were greater than I had anticipated.

[tbworld]

Since so many boards were hacked recently there is a ton of information on vb.org to assist you. Resolving your issues is not that difficult, but you must be thorough. In your case just concentrate getting the board up and running and keep all plugins disabled. Make backups at every step if you can. Ask for help here when you do not know what you are doing. Do not miss steps when following the guidelines.

You do have my sympathy, you have a bit of work to do. This is not the fun part of running a forum.

[Bladed]

WEll i posted on FB to a page that my main users are on asking them their opinion, whether or not to start from scratch or risk my missing a piece of potentially malicious code.

I ran the upgrade script again and still getting the same database error as in the op.

--------------- Added [DATE]1383825115[/DATE] at [TIME]1383825115[/TIME] ---------------

this is what I'm getting in my browser when I try to login to the admincp.


Warning: Function split() is deprecated in ..../includes/functions_login.php(204) : eval()'d code on line 10

Warning: Function split() is deprecated in ..../includes/functions_login.php(204) : eval()'d code on line 11
Unable to add cookies, header already sent.
File: /home/bonifer/public_html/includes/class_core.php
Line: 5755

[tbworld]

As I said before, do not try to upgrade. Restore your backup and follow the guidelines I posted. All you will have if you try to upgrade is a corrupted forum, with no known state.

[Bladed]

The copy of the forum I have is of the hacked forum. I don't think a clean backup copy exists.

[tbworld]

Originally Posted by Bladed

WEll i posted on FB to a page that my main users are on asking them their opinion, whether or not to start from scratch or risk my missing a piece of potentially malicious code.

I ran the upgrade script again and still getting the same database error as in the op.

--------------- Added 07 Nov 2013 at 03:51 ---------------

this is what I'm getting in my browser when I try to login to the admincp.


Warning: Function split() is deprecated in ..../includes/functions_login.php(204) : eval()'d code on line 10

Warning: Function split() is deprecated in ..../includes/functions_login.php(204) : eval()'d code on line 11
Unable to add cookies, header already sent.
File: /home/bonifer/public_html/includes/class_core.php
Line: 5755

Those errors are caused by plugins/mods that need to be upgraded or patched for v4.2.2. There are quite a few differences between v4.2.1 and v4.2.2 and it will definitely complicate you restoring your board.

What version of vBulletin are you running before you upgraded? What version of PHP?

[Bladed]

4.2.1 patch level 3
And all the pluguns have been removed

--------------- Added [DATE]1383826071[/DATE] at [TIME]1383826071[/TIME] ---------------

Thinking about it I'm betting it's one of the login mods the previous owner had installed being referenced by the database.

[tbworld]

They may have been removed, but they are currently not disabled. Disable your hooks from "includes/config.php." That error you are receiving is from hook
"login_verify_failure_username".

If we are still talking about the upgrade process. The php command 'split' would not be used in v4.2.2. under php5.4 (at least it should not be) except in an old plugin/mod.

It is possible that it is still stored in the datastore. In that case make sure you turn on debug mode in the "includes/config.php" file also.