Another Hack (NHBFights.com) any suggestions?

New Member Joined: Feb 11, 2006 Posts: 5

This site [ Only registered users can see links on this board! Get registered or login! ] was hacked a while ago. I need to fix it. It had 1 large story up which was an offensive picture.

When you click the links up top it says "module not active" now for all of them. I don't know what to do. I can't log in either and am unsure why. I can get to the database and change my username/password but it makes no difference, it just won't let me log in...

Site Admin Joined: Jun 04, 2004 Posts: 6432

There are several "How to recover from" documents floating around - including on this site.

There are also several recommendations about using different passwords for your cpanel login, nuke database access, nuke user and nuke admin user.

It sounds like your admin user has been compromised, enabling the attacker to disable your modules (although this could also be done with SQL injection), which are easy enough to enable once you have admin access or using a SQL tool like phpMyAdmin.

Do you have have any photo gallery or chat scripts installed? These can sometimes cause problems by opening holes even NukeSentinel can't stop, as will modules, typically ported, that do not use standard Nuke database access methods.

Do you not have NukeSentinel installed? If not, that would the first thing to do after restoring your admin access. Make sure you use admin authentication.

Posted: Sun Feb 12, 2006 11:39 am

Here's a start.