Need some help please for a few hacks

[yumyumcat]

Unfortunately, my board was hacked terribly by some Turkish board, we lost over 100k posts and they got into my database. They have hidden script in many folders and my admin told me it'd be best to start over ;( Five years of our posts down the tubes

In any event, I had some really great hacks I found here over a period of time, but I can't seem to find them.

One of them was when a user signed on, his/her avatar would be displayed at top of forum.
The other was the mood hack and spoilers. Astrological sign. MySpace profile thing too.

I found a spoiler one, but it's not the same one. I suppose it doesn't matter much, but I'm not good at this stuff and my administrator's away at school He was so helpful. My poor members are hanging in there with me, but any help would be greatly appreciated.

I'd love to get the Board back to where it was lot of fun, lots of goodies for my members and I'd be willing to pay (reasonable fee) to anyone that could help me if I can't figure these out for myself. I haven't been able to work on my Board in so long that I've forgotten many things. Things as simple as loading a new skin. I just don't recall *bad motorcycle accident* sooooooo, if anyone has time, could you please contact me either by PM or answer this post.

I used to have an older version, but we upgrade to Version 3.6.7.

Thanks for your time.

[Marco van Herwaarden]

If they got into the database and where able to upload mallicious files, then most likely the server itself was hacked (or cPanel/FTP account). First step would be to ensure that the server itself is clean and not vulnerable. Any other action would be useless until this is done.

If you have a backup of your database, then you can always restore your posts etc..

[yumyumcat]

Originally Posted by Marco van Herwaarden

If they got into the database and where able to upload mallicious files, then most likely the server itself was hacked (or cPanel/FTP account). First step would be to ensure that the server itself is clean and not vulnerable. Any other action would be useless until this is done.

Yes, we think they did! I notified the server folks and they took this quite seriously; thank goodness, but no other sites but mine was effected. I don't have a site that's terribly intriguing, just a bunch of animal, speedbike racing and so many other forums that are just fun. Nothing remarkable about it LOL. That's why I'm so shocked we were targeted.

Anyway, my admin took the old forum and put it in a new folder called "OLD SITE" ~ he even took my subdomains down and everything. Like I said, I'm so unfamiliar with this anymore. Basically, my time's very limited as well.

If you have a backup of your database, then you can always restore your posts etc..

He said I couldn't do that. I don't understand. Could you please elaborate? He stated that they put in script within the Board in many places. I suppose if he had different backups of it prior and dated them, then yes, probably could restore it right? I kinda doubt it though.

Thanks for the reply.

[Marco van Herwaarden]

If you have a (complete) backup then you should always be able to restore it. If you do not run any modifications and the latest vBulletin version, then it should not be possible to post any mallicious content (other then virus infected attachments, but that is a different story) or hack your database/files.

[yumyumcat]

Originally Posted by Marco van Herwaarden

If you have a (complete) backup then you should always be able to restore it. If you do not run any modifications and the latest vBulletin version, then it should not be possible to post any mallicious content (other then virus infected attachments, but that is a different story) or hack your database/files.

I'll get with the administrator and find out when he backed it up last. If he feels like there's a way to salvage it, than I would hope he would, but he seemed to think we should just start all over I'm not happy about it that's for sure, but if it can be recovered, than can we integrate it with our new version since that's already up and running?

Sorry for my ignorance.

[ravyn]

I had a bad time with my board and vbPlaza (I made some edits I shouldn't have and it corrupted the database.) I luckily had a backup, but it had vbPlaza data in it, so when I tried to reload the data into the database (which was a new install without vbplaza) it kept saying that there were too many variable with my posts because of the plaza data, so I have to add everything back in by hand. not fun removing all the vbplaza data and reworking the data. Not fun at all. I feel for you. Good luck!