Site Hacked

[jokerboy]

My site was hacked.  I can't figure out how to get it back.  The page loads fine from within admin but not at the URL.  Where might this little hack be???

[badknight]

can you post give us the link to your sitE?

[jokerboy]

O.K. I found it in an index.htm.  Now WB is not loading. 

[kweitzel]

Hi,

which Version did you have installed and which modules (including the integrated modules!).

Make a backup of the existing webspace like it s now (after the "hack"). Upload the files from the WB Version you are using on that site. Check your downloaded /pages folder for malicious files (compare the index.php and the page access files). Do the same with the folders templates and media and modules and then reupload these four folders. Then check the config.php for malicious code and reupload it as well. You should be able the reuse your site.

Take especially care with checking the media folder, if somebody got access to it, there will be the culprit.

IMPORTANT: You'll have to use the same WB Version first of all! If you want to upgrade to a newer version of WB, do it afterwards!

cheers

Klaus

[Luisehahne]

Maybe you have an older Fix package. Than you again have to upload the index.php in root folder. Please try and inform.

Dietmar

[jokerboy]

I uploaded the hacked site again now I am getting:
Template Error: set_root: /home/file/public_html/templates/argos_theme/templates is not a directory.
Halted.
when I try to log on to the admin panel.

What is that all about?

[Luisehahne]

Hi,

now step by step.

please download WB 2.8.2 Fixes 2011/08/01 (Rev. 1484)

unpack the package
upload all folder to your webspace
upload the index.php and upgrade-script.php to your webspace.
run the upgrade-script.php

Dietmar

[jokerboy]

I did all that.  re-named config.php.new to config.php and I get:


Warning: require_once(WB_PATH/framework/functions.php) [function.require-once]: failed to open stream: No such file or directory in /home/baker/public_html/upgrade-script.php on line 21

Fatal error: require_once() [function.require]: Failed opening required 'WB_PATH/framework/functions.php' (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/baker/public_html/upgrade-script.php on line 21

any suggestions?

thanks,
jb

[Luisehahne]

Your config.php is empty. Did you already install WB? then you have to fill the config.php as follows

Code:

<?php

define('DB_TYPE', 'mysql');
define('DB_HOST', 'localhost');
define('DB_NAME', 'databasename');
define('DB_USERNAME', 'datbase user');
define('DB_PASSWORD', 'database password');
define('TABLE_PREFIX', 'wb_');

define('WB_PATH', dirname(__FILE__));
define('WB_URL', 'http://www.yourdomain.com');
define('ADMIN_PATH', WB_PATH.'/admin');
define('ADMIN_URL', WB_URL.'/admin');

require_once(WB_PATH.'/framework/initialize.php');

[jokerboy]

O.K. I did that.  now the upgrade-script.php just returns a blank page.

[ruebenwurzel]

Hello,

wich php Version is running on your server?

Matthias

[jokerboy]

5.1.52-cll

[jokerboy]

O.K. I did a complete new install.  I tried to dump db and nothing shows.  It shows in PHP MyAdmin but not in WB.  Howhere can I see in WB admin what DB it is pulling from?

Thanks,
JB

[pcwacht]

config.php -> DB_NAME and TABLE_PREFIX
See allso (litle above) http://www.websitebaker2.org/forum/index.php/topic,22146.msg149360.html#msg149360

Oh, and it might be helpfull to know wich WB version you did have!
What was in the index.html, and was it surely a index.HTML?
WB don't use index.html but index.PHP

You are very sparse with information.

We don't have cristall balls where we can look in to fill in what we might need to know to help you.
We can only know what you tell, like normal people .


John

[jokerboy]

I thought of config.php after I posted last.  I don't understand.  the DB is populated with the old info but it does not show.  I also created a new test home page and it does show. 

I don't know the old version because it will not load anymore.

[pcwacht]

the DB is populated with the old info but it does not show. 

What doesn't show? I suspect pages, where don't they show, frontend/backend or both??

If they show in frontend, not in backend then the pagelink files are corrupt or missing. (pages/)
Just edit each page and WB will create new pagelink files.
Same with news items.

I also created a new test home page and it does show. 

New page shows, did you check the db to see if new page is added to the pages table?
If not then the new WB is n't using the old DB - correct the settings in config.php.

Allso remember please,  we don't see what you see, we don't know more then you tell us - we don't ask you to write a whole novell


John