Advertisement:

Author Topic: Database Hacked?  (Read 1893 times)

Offline yesman

  • Newbie
  • *
  • Posts: 3
Database Hacked?
« on: August 21, 2008, 03:00:24 PM »
Hello.

Let me start by apologizing if this is treading old ground.  A search with "database" and "hacked" got me soooo many hits that my eyes glazed over and I gave up looking for my answer after the first several pages.  Apologies again.

I recently had a 1.5.1 smf forum hacked by the Turks.  (hxxp:www.smarmybastard.com/smf [nonactive] --> harmless link, i replaced the index with a blank page) After reading a few forum posts here, I thought that it was probably just the php settings or index.php that was affected, but figured this was as good a time to upgrade as any... so I upgraded that forum to the public beta of 2.3.1.  I thought that the upgrade would replace the altered files.  That didn't help.

Then I decided to copy the tables to a new database, and create a fresh 2.3.1 install.  So I did. (hxxp:www.smarmybastard.com/mb [nonactive] --> still redirects, if visited) The new forum also redirects, leading me to believe that the redirect is coming from somewhere in the database tables.

Any help at all would be greatly appreciated.

Thanking you very much in advance,
Tim.
« Last Edit: August 21, 2008, 03:02:39 PM by yesman »

Offline karlbenson

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 15,630
  • Gender: Male
    • Lifeproof
Re: Database Hacked?
« Reply #1 on: August 21, 2008, 03:06:48 PM »
It looks like a board was created with the board name and description of
<meta http-equiv="refresh" content="1;URL=http://site.mynet.com/xanax_thg/"></a>

You'll have to delete the board via Admin > Boards

Offline yesman

  • Newbie
  • *
  • Posts: 3
Re: Database Hacked?
« Reply #2 on: August 21, 2008, 03:11:45 PM »
wow.

Thanks for the help, that was incredibly fast.

Is there a way to get directly into the admin settings without the redirect shunting me off?  or should I be trying to delete that board from myphpadmin?

Thanks again,
Tim.

Offline karlbenson

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 15,630
  • Gender: Male
    • Lifeproof

Offline yesman

  • Newbie
  • *
  • Posts: 3
Re: Database Hacked?
« Reply #4 on: August 21, 2008, 03:15:28 PM »
Thanks Again!