Forum hacked, keeps redirecting to to deface page after i deleted it

[kh99]

Are you still having the redirect issue? If you upload a static html page and go to it, does it still redirect?

I think Lynne mentioned the database because if they didn't change any files then the only thing left is the vb database.

[betterthanyours]

If they uploaded a plugin then chances are there are entries in your database that are making the redirect...

Is it possible for you to have the DB restored? Does your host take backups? If so, do that but also keep the current possibly compromised DB. Then, you can cross reference and compare any new tables or changes, delete those and possibly have repaired the DB

[kh99]

Also, as was mentioned above, if it is a plugin you can edit your includes/config.php file and add:

define('DISABLE_HOOKS', true);

somewhere after the first line. Then you should be able to go to the adminCP and use the plugin manager to figure out which one is causing the problem and disable it.

[Simon Lloyd]

I'd seacrh my core vbulletin php files for eval(base64 code!

[borbole]

Also ask your host to check the access logs for around the time that the hack happened to see what went down precisely.

[Brandon Sheley]

Originally Posted by kh99

Try running this script: https://vborg.vbsupport.ru/showthread.php?t=281080

Also, look in the Plugin Manager and see if there are any plugins you don't recognize.

Originally Posted by ProSportsForums

Have you tried disabling hooks globally via the config.php file?

define('DISABLE_HOOKS', true);

Originally Posted by TrevorS

I cant access my control panel because every page redirects.

have you tried the above?
do you have access to the database, or the files?

[TrevorS]

Originally Posted by Brandon Sheley

have you tried the above?
do you have access to the database, or the files?

tried, didnt work.

I have access to the db and files, yes.

[CAG CheechDogg]

Can you post a link to your site?

[TrevorS]

Originally Posted by CAG CheechDogg

Can you post a link to your site?

http://www.zamorak.net

[In Omnibus]

<script>window.location='http://zamorak.net/PhaisamAndDan.html'</script>Unable to add cookies, header already sent.<br />
File: /home/trevors/public_html/Zamorak.net/includes/config.php<br />
Line: 48<br />