Page 1 of 1

Power Cobra PHP Hack???

PostPosted: Mon Jul 17, 2006 6:23 pm
Author: Eon
Hey guys!! I know it's been a while since I have been on, but for some reason work banned most outside links due to bandwidth usage. can you believe the nerve of them!! LOL

Anyways, my site is now getting this error when you load it.

Fatal error: Call to undefined function: attach_setup_forum_auth() in /hsphere/local/home/dffclan/dffclan.net/includes/def_auth.php on line 83

http://www.dffclan.net

One of my admins said something about being hacked by Power Cobra or something like that. I tried replacing the def_auth, but no avail. I do not have a copy of the def_tree here at home, so I didn't want to mess it up that bad.

Here is what line #83 says:
Code: Select all
attach_setup_forum_auth($simple_auth_ary, $forum_auth_fields, $field_names);


Does anybody have a clue what I should do? The def_auth seems to be stock.

Thanks guys!

Re: Power Cobra PHP Hack???

PostPosted: Wed Jul 19, 2006 6:26 am
Author: Dragonsys
Code: Select all
undefined function


Sounds like a function problem.
Try uploading a backup oif includes/functions.php

PostPosted: Wed Jul 19, 2006 5:00 pm
Author: Eon
Nope. That didn't work. This thing is crazy. I have found 5 files that were added to folders that had to be left chmodded for integramod. They open a back door connect.

This is a serious security issue we need to deal with.

Re: Power Cobra PHP Hack???

PostPosted: Wed Jul 19, 2006 5:35 pm
Author: Teelk
The missing function is in the file attach_mod/includes/functions_includes.php, upload the file again.

PostPosted: Thu Jul 20, 2006 2:55 pm
Author: Eon
haha yeah I thought that too.. Actually this was easier than all that.

The guy that replaced the config.php file replaced it with one that had the wrong db name. I changed the name and wah lah.

So basically this dude got all of our db info and replaced our config to link to his crappy site.

Really nasty little bugger if I say so myself.