I lost the toolbar in reply and quick reply.

[Digital Jedi]

Originally Posted by tinoco2

I dont know how can i solve this.

I can?t edit a message or go to advance editor.

I tried change the style to test if that was the problem but nothing.

But what's in the default style when you look at it? Is the toggle button missing there, too? Not the toolbar. The toggle button.

[tinoco2]

Hi Digital Jedi, you can see the photos on first post of i can see.

I can?t see the toolbar, i say this:



But i can?t edit a message, when i tried i cant save it.

[Lynne]

Create a new style with no parent:

• Styles & Templates > Style Manager > Add New Style
• Parent Style: No Parent Style
• Title: Default vBulletin
• Allow User Selection: Yes
• Save

Then browse the site using that totally default vbulletin style - do you still have the same problem?

[tinoco2]

OH MY GOD!!

I HAVE A SERIOUS PROBLEM!!

I HAVE THIS -> https://vborg.vbsupport.ru/showthread.php?t=303111

[Lynne]

There are four steps to securing your site. If you don't do them all or you do them in the wrong order than you're still susceptible to being attacked again.

Close the hole...
This has three subparts in this instance.
1. Delete your install folder
2. Review your admin users and delete any that don't belong. Don't ban them. Don't make them regular users. Delete them.
3. Close access to your AdminCP using .htaccess. Use either user authorization with a different username and password or IP address restrictions.

Fill the Hole...
There are seven subparts in this instance.
1. Review your files for changes. You can do this under Maintenance -> Diagnostics.
2. Delete any Suspect Files.
3. Replace any files marked as "Does not contain expected contents"
4. Scan your plugins for malicious code (exec, base64, system, pass_thru, iframe are all suspect keywords). Delete any you find.
5. Repair any templates. Any templates that you don't have notes on changing, you need to revert. If you're using a custom style, it is best to delete your existing style and reimport from a fresh download.
6. Update your Addon Products.
7. Rebuild your datastores. You can use tools.php in the "do not upload" folder to do this. Upload it to your admincp directory, delete when done.

Secure the Hole
Parts of this were done by closing the hole but there are still things to do here.
1. Keep notes of all changes you make to the system - what templates and phrases you change, what files belong to which addons, what plugins do the addons install.
2. Consider using a separate Super Admin who has access to admin logs in the AdminCP. There should be only one Super Admin.
3. Create a lower permission Administrator for every day use.
4. Review your permissions in the system.
5. Block off access to the includes, modcp, packages and vb folders via .htaccess. Deny All can work here, unless you use the ModCP. You need user authorization there.
6. Move your attachments outside the forum root directory.
7. Create a complete backup of your site. Make database backups weekly.

Vigilance
You need to keep active on the security of the site.
1. Give out the fewest permissions necessary for anyone to do their job
2. Make sure your hosting provider updates the software.
3. Update to the latest vBulletin when it is released.
4. Make sure your addons are always up to date.

[tinoco2]

Thanks so much really.

How can i do the step 3?

I would like to close access to my AdminCP using .htaccess and add only 2 ips (i work in 2 places )but i dont know how can i do it.

--------------- Added [DATE]1383075927[/DATE] at [TIME]1383075927[/TIME] ---------------

When i try unistall a plugin, it appears this error:

PHP Code:

Database error in vBulletin 4.2.0:

Invalid SQL:

            DELETE cms_widgettype, cms_widget, cms_widgetconfig
            FROM package AS package
            LEFT JOIN cms_widgettype AS cms_widgettype
                ON cms_widgettype.packageid = package.packageid
            LEFT JOIN cms_widget AS cms_widget
                ON cms_widget.widgettypeid = cms_widgettype.widgettypeid
            LEFT JOIN cms_widgetconfig AS cms_widgetconfig
                ON cms_widgetconfig.widgetid = cms_widget.widgetid
            WHERE package.productid = 'dp_positionads';

MySQL Error   : Table 'admin_elrincon.cms_widgettype' doesn't exist
Error Number  : 1146
Request Date  : Tuesday, October 29th 2013 @ 02:44:18 PM
Error Date    : Tuesday, October 29th 2013 @ 02:44:18 PM
Script        : http://elrincondelcomprador.com/admincp/plugin.php?do=productkill
Referrer      : http://elrincondelcomprador.com/admincp/plugin.php?do=productdelete&productid=dp_positionads&s=
IP Address    : 95.XXXX.12
Username      : XXXXXX
Classname     : vB_Database
MySQL Version : 5.5.33-31.1 


[Lynne]

Do you have the CMS installed? That error is implying you are missing a cms table.

Google gave me this for IP restriction using .htaccess - http://docs.joomla.org/How_do_you_re...ng_htaccess%3F

[tinoco2]

Oh my god!

I created a new style, change to my new style and back to the old style and recovered the toolbar and the normally editor.

Thanks so much Lynne, Ozzy47 and Digital Jedi.

[Iari]

I know the Threat is old but i have the same problem
Ive tried everythink suggested in the thread but i still dont have any toolbar about the editors or a toggle button
im using 4.2.2 Patch 1

[Lynne]

I'd suggest you start your own thread with all the relevant information so we can help you.