Problem with attachment directory permissions

[Shades.]

I haven't done or changed anything on this one forum for a week or so but got on there today and all of a sudden the uploaded avatars are not showing. It was fine yesterday!

So I tried to reupload an avatar and get:

An Error Has Occurred!
The attachments upload directory is not writable. Your attachment or avatar cannot be saved.

The permissions are set same as my other sites on the same server and no problems...
Attachments: 755
Files: 644

I even tried 777

2.0.18

[Shades.]

https://*****.com/index.php?action=profile;area=forumprofile;u=1;save
The attachments upload directory is not writable. Your attachment or avatar cannot be saved.

#0 /Sources/Profile-Modify.php(2792): fatal_lang_error(string, string)
#1 /Sources/Profile-Modify.php(1005): profileSaveAvatarData(string)
#2 /Sources/Profile.php(640): saveProfileFields()
#3 /index.php(185): ModifyProfile()
#4 {main}

[Shades.]

Found the problem!

Some how the attachments directory got changed to

{"1":"\/home2\/something\/something.com\/attachments"}

How could that happen? Nobody else has access to admin! Hacked?

Last Admin log says:

Uninstalled package: "Breeze", version 1.0.15   July 31, 2021, 05:26:04 AM   Shades   Administrator

[Shades.]

Cpanel error logs:

[Sat Aug 07 13:33:53.325127 2021] [:error] [pid 652324:tid 140573203195648] [client 23.88.43.188:0] File does not exist: /home2/something/something.com/test.php, referer: anonymousfox.co
[Sat Aug 07 13:33:51.010326 2021] [:error] [pid 667775:tid 140572875880192] [client 23.88.43.188:0] File does not exist: /home2/something/something.com/config.php, referer: anonymousfox.co
[Sat Aug 07 13:33:41.258933 2021] [:error] [pid 667775:tid 140572800345856] [client 23.88.43.188:0] File does not exist: /home2/something/something.com/upload.php, referer: anonymousfox.co
[Sat Aug 07 13:33:38.761152 2021] [:error] [pid 604017:tid 140572901058304] [client 23.88.43.188:0] File does not exist: /home2/something/something.com/up.php, referer: anonymousfox.co
[Sat Aug 07 13:33:27.395606 2021] [:error] [pid 652324:tid 140573085697792] [client 23.88.43.188:0] File does not exist: /home2/something/something.com/legion.php, referer: anonymousfox.co
[Sat Aug 07 13:33:13.030143 2021] [:error] [pid 604018:tid 140573001770752] [client 23.88.43.188:0] File does not exist: /home2/something/something.com/haders.php, referer: anonymousfox.co
[Sat Aug 07 13:32:48.296174 2021] [:error] [pid 652324:tid 140573203195648] [client 23.88.43.188:0] File does not exist: /home2/something/something.com/old-index.php, referer: anonymousfox.co
[Sat Aug 07 13:32:35.666400 2021] [:error] [pid 652324:tid 140572984985344] [client 23.88.43.188:0] File does not exist: /home2/something/something.com/wp-1ogin_bak.php, referer: anonymousfox.co
[Sat Aug 07 13:32:26.165382 2021] [:error] [pid 652324:tid 140573136054016] [client 23.88.43.188:0] File does not exist: /home2/something/something.com/cindex.php, referer: anonymousfox.co
[Sat Aug 07 13:32:23.507898 2021] [:error] [pid 604017:tid 140572833916672] [client 23.88.43.188:0] File does not exist: /home2/something/something.com/wp-booking.php, referer: anonymousfox.co
[Sat Aug 07 13:32:15.785990 2021] [:error] [pid 667775:tid 140572884272896] [client 23.88.43.188:0] File does not exist: /home2/something/something.com/alfa.php, referer: anonymousfox.co
[Sat Aug 07 13:32:12.371277 2021] [:error] [pid 652324:tid 140572842309376] [client 23.88.43.188:0] File does not exist: /home2/something/something.com/alfindex.php, referer: anonymousfox.co
[Sat Aug 07 13:32:01.480689 2021] [:error] [pid 604018:tid 140572993378048] [client 23.88.43.188:0] File does not exist: /home2/something/something.com/xmlrp.php, referer: anonymousfox.co
[Sat Aug 07 13:31:46.684038 2021] [:error] [pid 604017:tid 140573219981056] [client 23.88.43.188:0] File does not exist: /home2/something/something.com/boom.php, referer: anonymousfox.co
[Sat Aug 07 13:31:32.119288 2021] [:error] [pid 652324:tid 140572993378048] [client 23.88.43.188:0] File does not exist: /home2/something/something.com/admin.php, referer: anonymousfox.co
[Sat Aug 07 13:31:17.584315 2021] [:error] [pid 604018:tid 140573060519680] [client 23.88.43.188:0] File does not exist: /home2/something/something.com/moduless.php, referer: anonymousfox.co
[Sat Aug 07 13:31:15.932081 2021] [:error] [pid 652324:tid 140573110875904] [client 23.88.43.188:0] File does not exist: /home2/something/something.com/style.php, referer: anonymousfox.co

Found this if anyone wants to know about Anonymousfox - https://support.cpanel.net/hc/en-us/articles/360058051173-What-is-the-anonymousfox-address-on-my-system-

[Steve]

Had you been hacked I think there would have been a lot more damage than that (not to mention your password changed).

Glad you got it figured out.