My forum has been hacked

[futeball]

Ok, found it. Try to edit it now....

[futeball]

if you changed your database password you must change it in settings.php as well.

Tq Illori. the forum is back on track. although have to revert back to last month posting coz i forgot to make backup of the database recently.

Thanks for the support and help.

[capitalw]

if you changed your database password you must change it in settings.php as well.

Tq Illori. the forum is back on track. although have to revert back to last month posting coz i forgot to make backup of the database recently.

Thanks for the support and help.

Glad to hear you got it going again!

I heard that CPanel had a few security issues years ago, I hope they have that long straightened out.

One thing to check: Look in the root directory of your website for a file called "phpshell.php". It simply acts like a low power file manager/reader. It gets around the common prohibition of the server coughing up the files in a directory if there is no index file.

Years ago when my host used CPanel, I found phpshell in the root directory of one of my sites. When I navigated directly to it, I found my entire site's files were open to the world, and I could add/change files without having file manager or FTP support. I removed it as soon as I found that. I had a couple site features being hacked and misused until I found and removed it.

I frequently check my sites for unknown files. It is easy as I have them mirrored on my computer here at home so anything out of place like extra files sticks out. Of course, the files can be altered and it takes a bit more work to make sure they are as you intended.

[futeball]

thanks for the tips capitalw