My database gets deleted when it accesses the site

[Megatr0n]

Just out of thin are like that?

Even had issues with restoring as it would crash and delete the whole database despite uploading it in patches?

Any ideas or help will be greatly appreciated.

[Lynne]

So you go to www.yoursite.com/index.php and it causes your database to get deleted? That makes no sense unless you have some malicious file on your site that is getting called to do this. Have you checked all your files and reinstalled vb?

[Megatr0n]

I'm about to do that now.

[Megatr0n]

I reuploaded all my files (including hacks) but it's happened twice now in the last 48 hours. I mean, the whole db gets deleted.

I am guessing it's a hack file. So, I decided to simply re-upload all the vB files and delete all other files of hacks, skins etc then see if it happens again. So far, so good.

Am, I right in assuming if it DOES happen again then the server is insecure? And if it DOESN'T it's a hack which, is the culprit?

Initially the DB would get deleted when trying to connect to the database until we overwrote all the original vBulletin files then when we're up and running it happens again.

The weird thing there's no trace of an unknown IP address in the Admin Control Panel log.

[SEOvB]

I'm going to guess your server is insecure or something else. Generally if a modification was doing that (that was released here) there'd be a public lynching of whoever released it.

[Megatr0n]

There have been modifications I've purchased outside vB.org which, were once released here.

Is it safe to say all newly released hacks get checked for security vulnerabilities on vB.org?

[FreshFroot]

Originally Posted by Megatr0n

There have been modifications I've purchased outside vB.org which, were once released here.

Is it safe to say all newly released hacks get checked for security vulnerabilities on vB.org?

If you got hacked and it was a 3rd party hack, I'm sure someone else would've reported it too.

My guess is it's your server. Keep monitoring it and look up ALL your modifications, in case your using an outdated version.

[SEOvB]

No its not safe to say that. The only time they get checked is whenever wants to do it for whatever reason, or if a security exploit has been found by someone who's been hacked.

Thats, why you shouldn't ever install mod's you dont need.

[Megatr0n]

The hosts have been pretty stubborn in not wanting to move us to another server. We'll, see what happens.

Well, I got the forum back up now and there are no hacks installed (all files were trashed). So, if we don't get hacked again for a while then wouldn't that limit the probability to a dodgy hack/file being the culprit ?

Last night, what happened (this is after I got my forum up and running after reinstalling the original vB files for the first time) was a message came up saying "Hacking Attempt" when I accessed my AdminCP. Does that give off any clues?

I did a search for that message on the official vBulletin forums and I found this:

http://www.vbulletin.com/forum/showt...acking+Attempt

http://www.vbulletin.com/forum/showt...acking+Attempt

Going by the first thread I think LA could be the villain because around the sametime it came up with a message saying "Only compatible with 3x series" - we have/had 3.7.3 installed though?

Your guys thoughts?

[FreshFroot]

I think you should ONLY install plugins that you NEED. Also, try to use the latest versions.

As for your host, if they aren't helping. Then you should find a new one...