Database Error

[newtoallthis]

Thanks, Yoshi! I've registered at the MediaWiki forum trying to get as much info as possible. 

[newtoallthis]

Just got this back from my host.

I would say your database is clean I checked for these terms:
<noframes>
<iframe>
</script>
<script type="text/javascript">
</frameset>

[kat]

It's a pity the search, here, is so ******.

I'm sure I've seen this, before, somewhere, here.

Let me see what I can find. It may take a while, though, coz I'll have to search manually.

[newtoallthis]

Thanks again for your help.

[kat]

No sweat, mate.

Just had a thought...

Can you get to the Admin for Simple portal?

If so, go to it's "General settings", and disable it.

Does the error persist?

[newtoallthis]

I can access SP admin, but the error isn't still showing.

Hope I've not confused matters, but the thread has developed from:-

1. No access to forum  - Unknown column 'b.id_board' in 'field list' File: /home/leighlan/public_html/forum/Sources/Subs-BoardIndex.php Line: 82, to,

2. Site restored by host - all was well for a short while, to,

3. Site down again - lot's of file permissions had somehow been accessed and set too high and the server wouldn't run the software, to,

4. Site recovered by resetting permissions - and this is where I'm at now.

The remaining problems I think, are:-

A. What caused the database error and how can it be prevented from recurring?

B. How was unauthorised access gained to the server to set the file permissions to 777 and how can the hole be plugged?

C. Is there any malware/malicious script in the files and database?

Just to reiterate, the forum is running OK at the moment.

In respect of C. above, I suspect that access was gained through an insecure wiki installation. Although it is claimed by Dokuwiki that running on Apache with htaccess makes it secure, I had a warning in the wiki admin panel suggesting that it wasn't secure. The wiki has been uninstalled and I'm looking for a replacement.

[Illori]

you should also change all your password associated with your hosting account, so that if they were breached for any reason your site will be secure again.

[newtoallthis]

you should also change all your password associated with your hosting account, so that if they were breached for any reason your site will be secure again.

I have done that, thanks. Both login to client area with a different password to gain access to cPanel.

[NanoSector]

There was a kb_scan.php utility you might like for issue C.

Not sure where to get it; do a search at the forums, is my guess.

[Illori]

you did change your database users password as well?

[newtoallthis]

you did change your database users password as well?

No, but I'd better had!

[newtoallthis]

I set a password for the database when I was installing SMF, but I cannot see any obvious way to change the password. In mySQL, I can create database, modify database, add new user to database.....

[Illori]

do you have a cpanel? in the same area you can create a user you should be able to change the password.

[newtoallthis]

do you have a cpanel? in the same area you can create a user you should be able to change the password.

I do have a cpanel. Database users can be added on the mySQL page, but only the existing password (twice) can be input on choosing any of the options on the page (create database, modify database, add new user to database).

[Illori]

you can always delete the user and recreate with a new password, and make sure you assign the user to the database as well. you could even create a new user that is different from the existing and edit it into your settings.php file.

[kat]

You can always ask your host to change the password, for you, I believe.

[newtoallthis]

OK, I'll try that.

Thanks for the help so far peeps!

[kat]

Pleasure!