Help needed! -> Website hacked - need to change pwrds

[ptgptg]

Hi everyone,

I need some help.
I have a multilingual website.
English and Hebrew. The English version runs WB 2.6.7 and the Hebrew version runs WB 2.6.4.
Yes, i know, these are VERY old versions and i guess now is the best time to upgrade
My website has been hacked and the admin passwords, in both versions of the website have been changed.
I regained control over the website but now that i want to change the admin password back, i frankly don't know how to do it.
I'm a noob in MySQL. I can get to the right place with PhpMyAdmin but when i try to change the password (Type: PASSWORD) it shows me the password in an encoded way but i cannot login to the admin area.
MySQL version is 5.0.91
Please advise.

Thanks

[badknight]

Hi everyone,

I need some help.
I have a multilingual website.
English and Hebrew. The English version runs WB 2.6.7 and the Hebrew version runs WB 2.6.4.
Yes, i know, these are VERY old versions and i guess now is the best time to upgrade
My website has been hacked and the admin passwords, in both versions of the website have been changed.
I regained control over the website but now that i want to change the admin password back, i frankly don't know how to do it.
I'm a noob in MySQL. I can get to the right place with PhpMyAdmin but when i try to change the password (Type: PASSWORD) it shows me the password in an encoded way but i cannot login to the admin area.
MySQL version is 5.0.91
Please advise.

Thanks

Hi ptgptg


in WB 2.6.7 the passwords in the database are not plain you must insert a MD5 Hash of your passwort:

In phpMyAdmin:

go to users search for your username, click edit and in the passwort field you must insert the md5 hash of the passwort.
=> click save

[ptgptg]

Thank man!
That did the job...

BTW: How hackable are these versions of WB?

[badknight]

Thank man!
That did the job...

BTW: How hackable are these versions of WB?

no problem

no code is save to 100%, but if you use the recommended version of WebsiteBaker, the risk to get hacked is greatly reduced.

[albatros]

BTW: How hackable are these versions of WB?

Hi,

take a look at the server-logs and think about FTP and trojans.

hth

albatros