Power Cobra PHP Hack???

[Eon]

Hey guys!! I know it's been a while since I have been on, but for some reason work banned most outside links due to bandwidth usage. can you believe the nerve of them!! LOL

Anyways, my site is now getting this error when you load it.

Fatal error: Call to undefined function: attach_setup_forum_auth() in /hsphere/local/home/dffclan/dffclan.net/includes/def_auth.php on line 83

http://www.dffclan.net

One of my admins said something about being hacked by Power Cobra or something like that. I tried replacing the def_auth, but no avail. I do not have a copy of the def_tree here at home, so I didn't want to mess it up that bad.

Here is what line #83 says:

Code: Select all

attach_setup_forum_auth($simple_auth_ary, $forum_auth_fields, $field_names);

Does anybody have a clue what I should do? The def_auth seems to be stock.

Thanks guys!

[Dragonsys]

Code: Select all

undefined function

Sounds like a function problem.
Try uploading a backup oif includes/functions.php

[Eon]

Nope. That didn't work. This thing is crazy. I have found 5 files that were added to folders that had to be left chmodded for integramod. They open a back door connect.

This is a serious security issue we need to deal with.

[Teelk]

The missing function is in the file attach_mod/includes/functions_includes.php, upload the file again.

[Eon]

haha yeah I thought that too.. Actually this was easier than all that.

The guy that replaced the config.php file replaced it with one that had the wrong db name. I changed the name and wah lah.

So basically this dude got all of our db info and replaced our config to link to his crappy site.

Really nasty little bugger if I say so myself.