Need Help about hacking

[tanzeelniazi]

Originally Posted by z3r0

From the admincp go to plugin manager in the left column then check for a product titled "vbulletin" that has the hook location "init_startup", click edit and if in contains the word base64 and a load of random text then you need to disable it.

In Product Vbulletin i have no init_startup

@RichiBoy67'
Already disable Forumrunner can i delete all forumrunner files ?


--------------- Added [DATE]1469003640[/DATE] at [TIME]1469003640[/TIME] ---------------

Superman, i really dont know what you say because you write so many words and my english is not good and i am little confuse please give me the perfect idea
Can i delete forumrunner files ? or install the patch because i dont want to upgrade my VB version at this time i have 4.2.0 and many addons working fine, if i update my VB after some addons are not working so need a help for my confusion

[socialteenz]

@tanzeelniazi

Yes, you can go ahead & delete forumrunner directory. You won't break any add on by upgrading to 4.2.0 to the latest. Make sure your on php5.4.0 or greater.

Always have a backup before upgrading.

[tanzeelniazi]

I see some addons are not update for 4.2.2 etc so i can not upgrade my VB.
If i remove forumrunner directory after my problem will be solved ?

--------------- Added [DATE]1469016443[/DATE] at [TIME]1469016443[/TIME] ---------------

Now delete forumrunner dir
Now i safe ?

[Paul M]

Originally Posted by tanzeelniazi

Now delete forumrunner dir
Now i safe ?

Safe ? From that specific FR issue, yes.
However, since you are running vB 4.2.0, you are not safe, it has other security holes, patched in later versions.

[RichieBoy67]

You need to upgrade and if they added a plug in or injected any debase64 code into your files you still have an issue..

[tanzeelniazi]

my forum is safe from other methods but now i get 1 more error
yesterday i delete forumrunner directory but today 1 more error is coming

Database error in vBulletin 4.2.0:

Invalid SQL:

                SELECT post.postid, post.threadid, post.visible, post.title, post.userid,
                        thread.forumid, thread.title AS thread_title, thread.postuserid, thread.visible AS thread_visible, thread.firstpostid
                FROM post AS post
                LEFT JOIN thread AS thread USING (threadid)
                WHERE postid IN (*);

MySQL Error   : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '*)' at line 5
Error Number  : 1064
Request Date  : Thursday, July 21st 2016 @ 08:57:35 AM
Error Date    : Thursday, July 21st 2016 @ 08:57:35 AM
Script        : http://xxxxxxx.com/forumrunner/request.php?d=1&cmd=get_spam_data&postids=*
Referrer      : https://xxxxxxxx.com/forumrunner/request.php?d=1&cmd=get_spam_data&postids=*
IP Address    : 1xx.xx.1xx.2xx
Username      : Unregistered
Classname     : XC_xxxxxx_MySQLi
MySQL Version :

[ForceHSS]

Originally Posted by tanzeelniazi

my forum is safe from other methods but now i get 1 more error
yesterday i delete forumrunner directory but today 1 more error is coming

Database error in vBulletin 4.2.0:

Invalid SQL:

                SELECT post.postid, post.threadid, post.visible, post.title, post.userid,
                        thread.forumid, thread.title AS thread_title, thread.postuserid, thread.visible AS thread_visible, thread.firstpostid
                FROM post AS post
                LEFT JOIN thread AS thread USING (threadid)
                WHERE postid IN (*);

MySQL Error   : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '*)' at line 5
Error Number  : 1064
Request Date  : Thursday, July 21st 2016 @ 08:57:35 AM
Error Date    : Thursday, July 21st 2016 @ 08:57:35 AM
Script        : http://xxxxxxx.com/forumrunner/request.php?d=1&cmd=get_spam_data&postids=*
Referrer      : https://xxxxxxxx.com/forumrunner/request.php?d=1&cmd=get_spam_data&postids=*
IP Address    : 1xx.xx.1xx.2xx
Username      : Unregistered
Classname     : XC_xxxxxx_MySQLi
MySQL Version :

Make sure you also delete all files that belong to forum runner that are still in your ftp

[tanzeelniazi]

I just delete forumrunner folder from cpanel, i think its the only 1 folder name is forumrunner so already delete

[RichieBoy67]

Did you uninstall the plug in before removing the files?

[tanzeelniazi]

No i just disable after remove forumrunner folder, its mean first i uninstall then remove ?