Go Back   vb.org Archive > vBulletin Modifications > Archive > vB.org Archives > General > Member Archives

Reply
 
Thread Tools
Details »»

Version: , by ptbyjason ptbyjason is offline
Developer Last Online: Jan 2010 Show Printable Version Email this Page

Version: Unknown Rating:
Released: 02-23-2002 Last Update: Never Installs: 0
 
No support by the author.

What can I do guys? I just got hacked and my everyone who has an account to the admin control panel had their account deleted!!! What can I do to get back in and fix it. Some of the info on the board does not need to be open to the public.

Show Your Support

  • This modification may not be copied, reproduced or published elsewhere without author's permission.

Comments
  #12  
Old 02-23-2002, 01:58 AM
ptbyjason's Avatar
ptbyjason ptbyjason is offline
 
Join Date: Dec 2001
Location: TX
Posts: 116
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

The original admin is gone. I can view the members list and the account doesn't exist. Is it a hidden account? If so I might have used the wrong password, I will try again.
Reply With Quote
  #13  
Old 02-23-2002, 01:59 AM
ptbyjason's Avatar
ptbyjason ptbyjason is offline
 
Join Date: Dec 2001
Location: TX
Posts: 116
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I have access to the php codes (FTP), just not the admin panel. That's what I meant, sorry for the confusion.
Reply With Quote
  #14  
Old 02-23-2002, 02:15 AM
TECK's Avatar
TECK TECK is offline
 
Join Date: Nov 2001
Location: Canada
Posts: 4,182
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

ok.. now be patient.. i will help u.. let me do some other stuff and i will post here a file that you will run in your admin folder
Reply With Quote
  #15  
Old 02-23-2002, 02:17 AM
TECK's Avatar
TECK TECK is offline
 
Join Date: Nov 2001
Location: Canada
Posts: 4,182
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

with my script you will run it and you will create a new account.. then you can access the admin panel.. i will explain to you in details how to secure your panel so nobody can have access to run it.. even if they tru to hack by calling the script from another server
Reply With Quote
  #16  
Old 02-23-2002, 02:22 AM
ptbyjason's Avatar
ptbyjason ptbyjason is offline
 
Join Date: Dec 2001
Location: TX
Posts: 116
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

thank you nakkid. Take your time. My board is about as secure as it is going to get right now. No one knows where it is and all of the posts that were sensitive information have either been pruned or manually deleted. I am not exposing it again until I know I have everything secure. I will wait all weekend if I have to (though I would prefer not too. ).


Thanks again nakkid.
Reply With Quote
  #17  
Old 02-23-2002, 02:34 AM
TECK's Avatar
TECK TECK is offline
 
Join Date: Nov 2001
Location: Canada
Posts: 4,182
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

ok.. i finished the script.. i test it on my board and you can add a admin user. now i will work on a tutorial on how to lock your access to any users but the ones you want
Reply With Quote
  #18  
Old 02-23-2002, 02:36 AM
TECK's Avatar
TECK TECK is offline
 
Join Date: Nov 2001
Location: Canada
Posts: 4,182
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally posted by ptbyjason
thank you nakkid. Take your time. My board is about as secure as it is going to get right now. No one knows where it is and all of the posts that were sensitive information have either been pruned or manually deleted. I am not exposing it again until I know I have everything secure. I will wait all weekend if I have to (though I would prefer not too. ).


Thanks again nakkid.
don't worry. i'm here to help.
the idiot who played this on you will have the biggest surprise on his live.. and i want you to restore your board the way it was before.. so he will freak even more.. on this way, you dont have to edit all your templates, etc
Reply With Quote
  #19  
Old 02-23-2002, 02:39 AM
TECK's Avatar
TECK TECK is offline
 
Join Date: Nov 2001
Location: Canada
Posts: 4,182
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

now.. i give you the choice:
1. do a php mod in your admin files so you can still use the session hash but if an admin that is not created by you wants to edit any of the atributes of any admin, will get a nice error message.

2. secure the folder with unique passwords. in this way nobody but your designated users will have access to the folder.. any file will be locked until you enter the right password. that's the one i like the most. the only disadvantage is that you have to ener your password twice. if u care about security, go for the second option.
Reply With Quote
  #20  
Old 02-23-2002, 02:39 AM
ptbyjason's Avatar
ptbyjason ptbyjason is offline
 
Join Date: Dec 2001
Location: TX
Posts: 116
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally posted by nakkid
don't worry. i'm here to help.
the idiot who played this on you will have the biggest surprise on his live.. and i want you to restore your board the way it was before.. so he will freak even more.. on this way, you dont have to edit all your templates, etc

On a night like tonight, you have no idea how much I like to hear that. I am beginning to feel like this will be fun now.
Reply With Quote
  #21  
Old 02-23-2002, 02:41 AM
TECK's Avatar
TECK TECK is offline
 
Join Date: Nov 2001
Location: Canada
Posts: 4,182
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

you know? i remember when i used to be in trouble and people helped me. i'm so happy that i can do this for you. let me know your option and i will post a tutorial with what to do.. i need you to post here your email i can email you the file... then wait for the tutorial, dont run it yet
Reply With Quote
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 07:15 PM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2024, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.04849 seconds
  • Memory Usage 2,301KB
  • Queries Executed 25 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (2)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)modsystem_post
  • (1)navbar
  • (6)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (3)pagenav_pagelink
  • (11)post_thanks_box
  • (11)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (11)post_thanks_postbit_info
  • (10)postbit
  • (11)postbit_onlinestatus
  • (11)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete