My sites been attacked. smf_members table is gone!

[RobinSlig]

SMF Version: SMF 1.0.7
I don't know how to create a table. Any help? I did a search and didn't find anything relavent.

[Bigguy]

Do you have a backup of your db

[RobinSlig]

No, I am trying to get my host to answer me to see if they have one.

[Bigguy]

db backup would be the way to go if you can get your hands on it or if your host can do it. I don`t know how to create or work with db`s very well but after creating the table were you going to manually insert all of your members again That would be alot of work.

[Scubasteve]

to create the table execute a query through phpmyadmin. This is a copy right from a backup dump off a demo 1.0.7 forum.

Koodi [Valitse] Laajenna


CREATE TABLE `smf_members` (
  ID_MEMBER mediumint(8) unsigned NOT NULL auto_increment,
  memberName varchar(80) NOT NULL default '',
  dateRegistered int(10) unsigned NOT NULL default 0,
  posts mediumint(8) unsigned NOT NULL default 0,
  ID_GROUP smallint(5) unsigned NOT NULL default 0,
  lngfile tinytext NOT NULL default '',
  lastLogin int(11) NOT NULL default 0,
  realName tinytext NOT NULL default '',
  instantMessages smallint(5) NOT NULL default 0,
  unreadMessages smallint(5) NOT NULL default 0,
  im_ignore_list tinytext NOT NULL default '',
  passwd varchar(64) NOT NULL default '',
  emailAddress tinytext NOT NULL default '',
  personalText tinytext NOT NULL default '',
  gender tinyint(4) unsigned NOT NULL default 0,
  birthdate date NOT NULL default '0000-00-00',
  websiteTitle tinytext NOT NULL default '',
  websiteUrl tinytext NOT NULL default '',
  location tinytext NOT NULL default '',
  ICQ tinytext NOT NULL default '',
  AIM varchar(16) NOT NULL default '',
  YIM varchar(32) NOT NULL default '',
  MSN tinytext NOT NULL default '',
  hideEmail tinyint(4) NOT NULL default 0,
  showOnline tinyint(4) NOT NULL default 1,
  timeFormat varchar(80) NOT NULL default '',
  signature text,
  timeOffset float NOT NULL default 0,
  avatar tinytext NOT NULL default '',
  im_email_notify tinyint(4) NOT NULL default 0,
  karmaBad smallint(5) unsigned NOT NULL default 0,
  karmaGood smallint(5) unsigned NOT NULL default 0,
  usertitle tinytext NOT NULL default '',
  notifyAnnouncements tinyint(4) NOT NULL default 1,
  notifyOnce tinyint(4) NOT NULL default 1,
  memberIP tinytext NOT NULL default '',
  secretQuestion tinytext NOT NULL default '',
  secretAnswer tinytext NOT NULL default '',
  ID_THEME tinyint(4) unsigned NOT NULL default 0,
  is_activated tinyint(3) unsigned NOT NULL default 1,
  validation_code varchar(10) NOT NULL default '',
  ID_MSG_LAST_VISIT int(10) unsigned NOT NULL default 0,
  additionalGroups tinytext NOT NULL default '',
  smileySet varchar(48) NOT NULL default '',
  ID_POST_GROUP smallint(5) unsigned NOT NULL default 0,
  totalTimeLoggedIn int(10) unsigned NOT NULL default 0,
  passwordSalt varchar(5) NOT NULL default '',
  PRIMARY KEY (ID_MEMBER),
  KEY memberName (memberName(30)),
  KEY dateRegistered (dateRegistered),
  KEY ID_GROUP (ID_GROUP),
  KEY birthdate (birthdate),
  KEY posts (posts),
  KEY lastLogin (lastLogin),
  KEY lngfile (lngfile(30)),
  KEY ID_POST_GROUP (ID_POST_GROUP)
) TYPE=MyISAM;

[gamesmad]

Do what Scubasteve says as a temporary measure.  If your host produces a backup, upload it to a new db, open up the db in phpmyadmin and download a backup of the members table.  Upload it to the old database.  Then change your admin pass and the db pass to avoid any more attacks.

Will

[RobinSlig]

Now I am receiving the message everyone else has received, that the database needs to be upgraded. 

[Scubasteve]

Depending on the size of your forum maybe you should just start over. New database name and password, better passwords, and more security measures.

However, if your host is doing things right, he has a full backup of everything

[RobinSlig]

I can't do that. I have a custom theme and everything. There's over 200 members and I've had it since August. The host server says it wasn't hacked that it needed to be upgraded. I go to the package manager and I can't upload the patches.

[RobinSlig]

I also get this error when I try to see the board.
Table 'urbanlo_SMFdatabase.smf_messages' doesn't exist
File: /hsphere/local/home/urbanlov/karl-urban.com/Sources/BoardIndex.php
Line: 82

Never mind, I will just delete it and start all over. Thanks ScubaSteve for your help!

[Scubasteve]

Even if it was hacked it is possible the host will blame it on the software to try and prevent making themselves look unsecure or bad in anyway. Tell them you dont care what the problem is you just want to know if they have backups. If they dont then save all your theme files and such, but your database is totally hosed by the looks of it. Re-install clean, reload your theme, and apologize to the members. Chalk it up to a good lesson and keep regular backups to prevent any future losses.

I would also make sure you arent paying for backups you arent getting. Consider a new host.

[RobinSlig]

I haven't heard back from them on who did it yet. They are very slow in doing that. I will be making a back up database and looking into a new hosting company. Thought of that earlier this month. Now to put my plan into motion. I am also trying to learn how to make a second database that the site can run off of if their server goes down.