Hacked and reinstalling from scratch

This is where youll find security related information.
Discuss Integramod/phpbb security issues here.

Moderator: Integra Moderator

Hacked and reinstalling from scratch

PostAuthor: BMD » Tue Aug 29, 2006 11:18 am

I have been hacked and site wiped by hackers to the root directory.

My SQL database is totaly intact.

I"d like to reinstall from scratch if possible and re-link to the SQL database I have (over 250 users).

What is the BEST way to go about this.

Install phpBB 2.0.21 and upgrade that to IM?

or

Install IM and go the multiple upgrade of phpBB to bring it up to 2.0.21 status?

I'll be changing the "Powered By" text in the footers to image links to help cut the search by hackers down.

I'll also be implementing the security patchs ASAP.
Last edited by BMD on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

BMD
Members
Members
 
Posts: 84
Likes: 0 post
Liked in: 0 post
Joined: Thu Aug 24, 2006 4:12 am
Cash on hand: 0.00

PostAuthor: Michaelo » Tue Aug 29, 2006 11:39 am

Currently working on phpBB to 140 upgrade but it will be a little time before it goes public...
Last edited by Michaelo on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
Kiss Portal Engine phpbbireland (status: Released)
User avatar
Michaelo
Administrator
Administrator
 
Posts: 1646
Likes: 0 post
Liked in: 0 post
Joined: Sat Mar 11, 2006 5:14 pm
Cash on hand: 0.00
Location: Dublin, Ireland

Re: Hacked and reinstalling from scratch

PostAuthor: BMD » Tue Aug 29, 2006 11:59 am

That would be great!

I'm waiting on My Host Provider to find out what happened to my root directory

I will be able to use my exhisting SQL database?
Last edited by BMD on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

BMD
Members
Members
 
Posts: 84
Likes: 0 post
Liked in: 0 post
Joined: Thu Aug 24, 2006 4:12 am
Cash on hand: 0.00

PostAuthor: gcomfx.com » Tue Aug 29, 2006 1:25 pm

"Michaelo";p="14513" wrote:Currently working on phpBB to 140 upgrade but it will be a little time before it goes public...


What's different between this and the BETA upgrade in the download section for 1.40?
Last edited by gcomfx.com on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
Paul (gcomfx) - 100mphclub.com originator
[size=99px]
User avatar
gcomfx.com
Sr Integra Member
Sr Integra Member
 
Posts: 251
Likes: 0 post
Liked in: 0 post
Joined: Wed Apr 12, 2006 8:34 am
Cash on hand: 0.00

Re: Hacked and reinstalling from scratch

PostAuthor: BMD » Tue Aug 29, 2006 3:39 pm

OK

I have DLed the 140 beta and phpBB2.0.21

do it extract them both... make the security edit in the IM update.... copy the files to the pbpBB folder... upload it and install?

In that order?

Or


Do I make the edits in the 140 beta
upload and install the 2.0.21
upload and install the 140 (security edited)?

then I need to know how to point the forum at my exhisting SQL database.
Last edited by BMD on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

BMD
Members
Members
 
Posts: 84
Likes: 0 post
Liked in: 0 post
Joined: Thu Aug 24, 2006 4:12 am
Cash on hand: 0.00

Re: Hacked and reinstalling from scratch

PostAuthor: IntegraMOD » Wed Aug 30, 2006 5:47 am

"BMD";p="14541" wrote:OK

I have DLed the 140 beta and phpBB2.0.21

do it extract them both... make the security edit in the IM update.... copy the files to the pbpBB folder... upload it and install?

In that order?

Or


Do I make the edits in the 140 beta
upload and install the 2.0.21
upload and install the 140 (security edited)?

then I need to know how to point the forum at my exhisting SQL database.

I am by no means an expert on this but this is how I would do the re-install.

1. Create a folder and upload integramod 1.40 files.
2. Create a temp database for your new install.
3. Install integramod 1.40 as per normal install instructions connecting it to your temp database.
4. Download and apply all the updates 2.0.17 through to 2.0.21
5. Download security patch 103
6. Apply all the latest patches from this topic [url=http]HERE[/url]
7. Then once your forum is up and running with all the patches you can do either of the following.

Option 1, Delete all the tables from the temp database and and import your old database.

Options 2, Re-create your database and edit your config.php to reflect your old database values.

I think that will get your new forum up and running with your old database. Like I said above I am by no means an expert at this so if someone thinks that this is not correct please correct me.
Last edited by IntegraMOD on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
Image
Please do not PM for support
User avatar
IntegraMOD
Administrator
Administrator
 
Posts: 459
Likes: 0 post
Liked in: 0 post
Joined: Sat Mar 11, 2006 3:46 pm
Cash on hand: 0.00
Bank: 100.00
Location: Seattle Wa

Re: Hacked and reinstalling from scratch

PostAuthor: BMD » Wed Aug 30, 2006 7:54 am

Thanks

I have the new board up online w/ patches

I installed the phpBB 2.0.21 and the used ther IM 140 beta and atted the patches

I just need to point it at the old database.
Last edited by BMD on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

BMD
Members
Members
 
Posts: 84
Likes: 0 post
Liked in: 0 post
Joined: Thu Aug 24, 2006 4:12 am
Cash on hand: 0.00

PostAuthor: IntegraMOD » Wed Aug 30, 2006 8:32 am

"BMD";p="14579" wrote:Thanks

I have the new board up online w/ patches

I installed the phpBB 2.0.21 and the used ther IM 140 beta and atted the patches

I just need to point it at the old database.


Yes edit config.php and replace it with the old database values
Last edited by IntegraMOD on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
Image
Please do not PM for support
User avatar
IntegraMOD
Administrator
Administrator
 
Posts: 459
Likes: 0 post
Liked in: 0 post
Joined: Sat Mar 11, 2006 3:46 pm
Cash on hand: 0.00
Bank: 100.00
Location: Seattle Wa

Re: Hacked and reinstalling from scratch

PostAuthor: BMD » Wed Aug 30, 2006 4:08 pm

Well I have the house rebuilt... just need to slap on the paint and wallpaper...... exterminate a few bugs and hold an open house.


Ok someone remind me why I prefer IM... again

a few problems....

the subice templates are screwed... need to know how to get them reinstalled

Avatars are not working now.... nothing in profile to even upload an avatar.... and the ones transferred over from the old system are Xed out image missing... but I see them physical in the folder.

other than that and tweaking the icons and menus a little it seems to be ok....
all the topics are there...videos play... images in the gallery...

all is good in the world......
<said> :ra: [url=http]The Balloontrader[/url] <img>
Take a looksee and I'm open to suggestions.
Last edited by BMD on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

BMD
Members
Members
 
Posts: 84
Likes: 0 post
Liked in: 0 post
Joined: Thu Aug 24, 2006 4:12 am
Cash on hand: 0.00

PostAuthor: Michaelo » Wed Aug 30, 2006 5:07 pm

I like the humor ;)
Last edited by Michaelo on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
Kiss Portal Engine phpbbireland (status: Released)
User avatar
Michaelo
Administrator
Administrator
 
Posts: 1646
Likes: 0 post
Liked in: 0 post
Joined: Sat Mar 11, 2006 5:14 pm
Cash on hand: 0.00
Location: Dublin, Ireland

Re: Hacked and reinstalling from scratch

PostAuthor: BMD » Wed Aug 30, 2006 7:20 pm

DOH!

ok I missed the set for the Avatars... that's in the box...


Now about getting the SubIce styles right

should I uninstall and reinstall the styles?
Last edited by BMD on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

BMD
Members
Members
 
Posts: 84
Likes: 0 post
Liked in: 0 post
Joined: Thu Aug 24, 2006 4:12 am
Cash on hand: 0.00

PostAuthor: Michaelo » Wed Aug 30, 2006 7:30 pm

If you have another style install... make that the default, then uninstall subice and reinstall it... might help but if the its the same... check the upload went ok (sometimes these file get a little corrupted) <img>
Last edited by Michaelo on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
Kiss Portal Engine phpbbireland (status: Released)
User avatar
Michaelo
Administrator
Administrator
 
Posts: 1646
Likes: 0 post
Liked in: 0 post
Joined: Sat Mar 11, 2006 5:14 pm
Cash on hand: 0.00
Location: Dublin, Ireland

Re: Hacked and reinstalling from scratch

PostAuthor: BMD » Thu Aug 31, 2006 10:41 am

I have replaced the text links on my site in the overall footers with temporary image source links to help cut the search engine hackers

Mike... let me know when "formal" images are available....

Gang... you should rename the images something unrelated to IM a phpBB and put them in your site image folder.

Code: Select all
   <a href="http]</</a>    


This is how I did mine..... the specific site info edit to generic.

I have the versions and copyright incorperated in the images

[flash=,:3rxvqm2a]http://www.balloontrader.com/lta/images/portal_buttons/footer_im.gif[/flash:3rxvqm2a]

[flash=,:3rxvqm2a]http://www.balloontrader.com/lta/images/portal_buttons/footer_bb.gif[/flash:3rxvqm2a]

My site background is light blue... but you get the idea
Last edited by BMD on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

BMD
Members
Members
 
Posts: 84
Likes: 0 post
Liked in: 0 post
Joined: Thu Aug 24, 2006 4:12 am
Cash on hand: 0.00

PostAuthor: Michaelo » Thu Aug 31, 2006 4:24 pm

It's available to beta test guys... why not join them or we might be able to sort something out for 140 guys this weekend or before even... time allowing..

Mike
Last edited by Michaelo on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
Kiss Portal Engine phpbbireland (status: Released)
User avatar
Michaelo
Administrator
Administrator
 
Posts: 1646
Likes: 0 post
Liked in: 0 post
Joined: Sat Mar 11, 2006 5:14 pm
Cash on hand: 0.00
Location: Dublin, Ireland

PostAuthor: BMD » Thu Aug 31, 2006 5:02 pm

"Michaelo";p="14674" wrote:It's available to beta test guys... why not join them or we might be able to sort something out for 140 guys this weekend or before even... time allowing..

Mike


Mike that was a little vague...

what exactly is available to test?....

why not join what?
Last edited by BMD on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

BMD
Members
Members
 
Posts: 84
Likes: 0 post
Liked in: 0 post
Joined: Thu Aug 24, 2006 4:12 am
Cash on hand: 0.00

Next

Return to Forum Security

Who is online

Registered users: Bing [Bot], Google [Bot], Helter, Majestic-12 [Bot]