XOOPS 
Forum
Forum Index General Forums Community Support Modules Support Themes Support Development International Support Module Hack Reviews Theme Designer Talk
  1. Board index / 
  2. General XOOPS.org forums / 
  3. XOOPS.org Members Lounge 
  4.  / someone hacked my sites.. help needed
Register
11
skalpa
Re: someone hacked my sites.. help needed

  • 2004/1/13 12:08

  • skalpa

  • Quite a regular

  • Posts: 300

  • Since: 2003/4/16


Quote:
A shame they can't put all that energy to good use.......


Doing this is almost harmless, and shows site owners there really is a problem with their configurations.
IMO: this is good use.


Skalpa.>
12
DonXoop
Re: someone hacked my sites.. help needed

You will need to fix whatever let them in or they will be back. The firewall probably isn't the weak point since they likely came in on a valid port. I do see that the server is broadcasting way too much info about itself (FrontPage?, there is something to look at and fix or dump...).

As you have noticed it isn't a weakness in XOOPS but further back in the server. The versions I can see are fairly new (unless they just updated...) of the parts I know about but the FrontPage module is something I would stay far away from.
13
ronhab
Re: someone hacked my sites.. help needed

  • 2004/1/13 14:23

  • ronhab

  • Friend of XOOPS

  • Posts: 160

  • Since: 2003/4/27


Quote:
Doing this is almost harmless, and shows site owners there really is a problem with their configurations.
IMO: this is good use.


Um, if I found a flaw in your house's security, would it be a good thing if Ijust spraypainted your kitchen and living room since I didn't take anything? The only reason nothing more serious is usually done is because the people doing defacements don't have any l33t 5k1LLz.
14
Bazus
Re: someone hacked my sites.. help needed

  • 2004/1/15 2:48

  • Bazus

  • Not too shy to talk

  • Posts: 144

  • Since: 2002/9/23


after replacing all instances of index.php through out the whole site, I am getting a blank page to start.

http://www.abctyping.com andhttp://www.mrch.org

I've look here how to fix this blank page issue but don't see to solve it. this hacker did something bad to my sites. a normal site with html it's easy to fix just reeplace the index.html with a fresh copy but XOOPS sites are not as easy.

anyone please give a clue how to solve this blank page.
15
Bassman
Re: someone hacked my sites.. help needed

  • 2004/1/15 3:38

  • Bassman

  • Friend of XOOPS

  • Posts: 1272

  • Since: 2003/5/23



if you look at the source, all you get is
Quote:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1"></HEAD>
<BODY></BODY></HTML>

it looks as though the site isn't getting called from the database.
16
Bazus
Re: someone hacked my sites.. help needed

  • 2004/1/15 4:22

  • Bazus

  • Not too shy to talk

  • Posts: 144

  • Since: 2002/9/23


it's connecting to the database, just for testing i changed the mainfile.php to point to a nonexisting database and the error was different. the blank page usually is the one you posted.

the hard thing I find is to login because the pagehttp://www.abctyping.com/user.php shows blank too.

if i could fix thehttp://www.mrch.org I think I could take a chance to fix this too.
17
ronhab
Re: someone hacked my sites.. help needed

  • 2004/1/15 10:59

  • ronhab

  • Friend of XOOPS

  • Posts: 160

  • Since: 2003/4/27


When you went through the steps for troubleshooting a blank page, what did PHP debug turn up as the error?
18
DonXoop
Re: someone hacked my sites.. help needed

You should run some stand alone code to see what might be happening. The easiest is a one liner that will check the PHP install. There could be problems there. Create a text file for example:

info.php:

<?php phpinfo(); ?>

If you also install a stand alone app like phpAdmin and maybe some other apps you can do some maintenance even if the X is down.

We can at least eliminate the backend as a problem if these check out.
19
Bazus
Re: someone hacked my sites.. help needed

  • 2004/1/15 23:34

  • Bazus

  • Not too shy to talk

  • Posts: 144

  • Since: 2002/9/23


I doubt that has something to do with PHP conf in the server, otherwise the sitehttp://www.naccion.org which is in the same shared ip address wouldn't work.. I'm trying to fix the sitehttp://www.mrch.org which will give me the answer to fix the other one that is showing a blank page.

as I posted I reeplaced all the index.php files for a fresh copy, and somehow the site was pointing to /install/index.php so I uploaded a fresh copy of mainfile.php and since that I got blank pages.
20
DonXoop
Re: someone hacked my sites.. help needed

It might not have anything to do with the backend but you would still be wise to have *something* that can run stand alone under the same webroot.

Being able to admin the database stand alone is much better than a module since fixing a db problem in X is kinda hard to do when you depend on X for the fix. Catch-22

Can you admin the db and make sure it is o.k.? It doesn't hurt to have a copy of what the server is running (phpinfo).

Here is my suggestion; you should not trust *anything* on the server right now. If it is hosted you should get assurance that it has been properly checked.

Then move your current webroot (rename the base dir) and make a fresh copy from a freshly downloaded X. Grab a copy of the current database. Go through the motions of an install and see if you are alive.

How much of the physical files are different than a new install? Most of the site is in db.
« 1 (2) 3 »

Login

Register now!  |  Lost Password?

Search

Advanced Search

Recent Posts

Who's Online

239 user(s) are online (149 user(s) are browsing Support Forums)

Members: 0

Guests: 239

more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: May 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits