Rewrite some tables

[leftwich86]

Our forum was hacked and here's the code.

Database error in vBulletin 3.8.3:

Invalid SQL:

SELECT forum.forumid, lastpost, lastposter, lastthread, lastthreadid, lasticonid, threadcount, replycount, lastpostid, lastprefixid

FROM .forum AS forum;

MySQL Error : Unknown column 'forum.forumid' in 'field list'
Error Number : 1054
Request Date : Thursday, March 18th 2010 @ 07:15:40 PM
Error Date : Thursday, March 18th 2010 @ 07:15:41 PM

Can this be fixed my just uploaded a backup we had up? Or do those tables need to be fixed?

[borbole]

Originally Posted by leftwich86

Our forum was hacked and here's the code.

Database error in vBulletin 3.8.3:

Invalid SQL:

SELECT forum.forumid, lastpost, lastposter, lastthread, lastthreadid, lasticonid, threadcount, replycount, lastpostid, lastprefixid

FROM .forum AS forum;

MySQL Error : Unknown column 'forum.forumid' in 'field list'
Error Number : 1054
Request Date : Thursday, March 18th 2010 @ 07:15:40 PM
Error Date : Thursday, March 18th 2010 @ 07:15:41 PM

Can this be fixed my just uploaded a backup we had up? Or do those tables need to be fixed?

If I were you I would first try to fix the error. Because if you restore from a backup then all the posts, topics, members etc that were acquired from the time of that backup until now will be lost. But if the backup is very recent then go with the restore route instead.

Did you do any modification to your forum prior to getting that error?

P.s. From the error shown above I doubt that this is a hack btw.

[leftwich86]

Somebody uploaded something thru FTP entitled hack.php, etc and stuff like that. Hacked the FTP, but Im not worried about what they did, just about how to fix it

Do you have MSN or AIM?

[Marco van Herwaarden]

If you are unsure what the attacker changed, then a complete restore (after securing the site) is the best option.

[borbole]

In that case I agree with Marco. A restore would be the best thing under the circumstances.

[Marco van Herwaarden]

PS If that is a full copy of the error message in the first post, then this error is probably a result of a modification, you could try disabling that modification.