Version: , by ptbyjason
Developer Last Online: Jan 2010
Version: Unknown
Rating:
Released: 02-23-2002
Last Update: Never
Installs: 0
No support by the author.
What can I do guys? I just got hacked and my everyone who has an account to the admin control panel had their account deleted!!! What can I do to get back in and fix it. Some of the info on the board does not need to be open to the public.
Show Your Support
This modification may not be copied, reproduced or published elsewhere without author's permission.
you know? i remember when i used to be in trouble and people helped me. i'm so happy that i can do this for you. let me know your option and i will post a tutorial with what to do.. i need you to post here your email i can email you the file... then wait for the tutorial, dont run it yet
reading back over everything. Wouldn't he still be able to get into a new account with the second option? Or are you saying that in order to log in to the admin panel you have to know the universal password?
one thing.. this should work ok in 2.0.3 i have test it on 2.2.2 but the database structure for members didnt changed.. so you will be ok
is time for me to make you a happy man let me start the install and security procedure....
01. first create 2 files called htaccess.txt and htpasswd.txt.
in htaccess.txt place this:
-------------------------------
order allow,deny
allow from all
require valid-user
Authname anabolicreview.com
AuthPAM_Enabled off
Authtype Basic
AuthUserFile /path/to/your/forum/admin/.htpasswd
-------------------------------
save the file. this file will lock your admin folder, if the username and
password is incorrect.
in htpasswd.txt place this:
-------------------------------
username:encryptedpassword
-------------------------------
to make an username and encrypted password, go here: http://www.xs4all.nl/~remcovz/htpasswd.html
save the file.
NOTE: you can make as many users you want. place them all in htpasswd.txt file. here it is an example the way your file
should look like:
-------------------------------
PtbyJason:JFE77XeDHmQc2
nakkid:TpWjdGMlaQXuI
-------------------------------
NOTE: the username and password are case sensitive.
02. now that we have the 2 files saved, upload them to your /admin folder
and rename them to .htaccess and .htpasswd, using your favorite
ftp client. they will become invisible.
03. upload to your /admin folder the adduser.php file i emailed you
and run it. if you did a good job with .htaccess and .htpasswd files, you will
get a window asking you to enter your username and password. do that.
the script will load and you can enter all the info necessary to create your
admin account.
NOTE: make sure you select from the dropdown the Administrators group because
with this script you can add any member to any group you want.
04. now that you created a new admin account, is time to nail the sucker
who did this. access your /admin/index.php file as usual. the secured window
will not ask you again to enter your username and pass because the lap of time
set to store your information, so there is no need to panic..
05. enter your new username and password, at VB prompt, as usual.
06. delete all admin accounts. you are done and in control again.
it was easy right? yep it was, so why you panic?