site hacked - no cp access

[essque]

Running an earlier version of 3.7 and it looks like i've been hit with a redirect hack. Cannot log into the admin CP either. I've done a preliminary search on the subject and have tried a few things to no avail. Anyone have an idea of the best way to fix this? I'd be willing to pay through paypal if necessary. Web host is playing dumb. Any help would be greatly appreciated.

[Mike21]

try backup of your database.

[DragonBlade]

Before you do that... You do have access to the database, correct? If not phpMyAdmin, you at LEAST have the database password, yes?

[essque]

yes, i do have access to the database in my fantastico control panel but i dont see a lot of options there.

[DragonBlade]

Sorry for the late response, I'm sure you've already figured out what to do by now... But I'll post in case other experience a similar problem.

I've never used Fantastico, but if it allows you to manipulate the database, get somewhere where you can enter a MySQL Command. First enter this:

SELECT username, userid FROM user WHERE usergroupid=6 OR FIND_IN_SET(6, membergroupids)

This will search your database to find all users who are a member of the Administrator usergroup. If your username/userid is NOT on there, then you simply need to add '6' to your list of usergroupids.

First find out if there's anything in your membergroupids:

SELECT membergroupids FROM user WHERE userid=YOURUSERIDHERE

(replacing YOURUSERIDHERE with your userid). If there are any numbers in the result, use this code:

UPDATE user SET membergroupids=CONCAT(membergroupids, ',6') WHERE userid=YOURUSERIDHERE

If there was NOT any numbers, use this code instead:

UPDATE user SET membergroupids='6' WHERE userid=YOURUSERIDHERE

This will put you back in the Admin Group.



If you are ALREADY in the Admin group, then it means the Admin Group was changed to not be Admins anymore, or something. XP If that's the case, use this code to make the group Administrator again:

UPDATE usergroup SET adminpermissions=3 WHERE usergroupid=6

If it doesn't allow you to DO anything as an Admin, use this code:

UPDATE administrator SET adminpermissions=491516 WHERE userid=YOURUSERIDHERE

. That should give you full Admin access***.

***: Note, this might vary depending on if you've added bitfields. I -think- this is default, but not sure. You can check who has what permissions, though, by using

SELECT administrator.userid, administrator.adminpermissions, user.username FROM administrator, user WHERE administrator.userid=user.userid

, and just copy the highest number. X3

[Paul M]

essque,

You are currently showing up as unlicensed.

To be able to download modifications and/or receive support here at vBulletin.org, we ask you to please click here (vB-Germany users click here, vB-Chinese users click here) and enter your email address. You will need to use your customer number and password (which will be in the email you got when you paid for your license) to access that page. Please note that your email is case sensitive.

To protect our customers privacy you will also need to Opt-In to license validation for all Support Sites. You must authorise vBulletin.org in order to validate your license status here. You can do this at the page linked above for your distributor. Make sure to set the permission to allow vBulletin.org to validate your status.

The update of your account can take up to one hour.

Thank you.