Seibertron.com Energon Pub Forums

I'm not what's happened with the server exactly, but I can tell you that all of the files and such on the site are still intact. It seems the hack just re-directs people if they try to access any page to the site. If I can't figure out how to fix this mess and Pepie is unable to help, then the only thing we'll be able to do is move to another server. We'll only be able to do that with some generous donations if it comes to that.

It hasn't replaced all the PHP files? That's good.

I know next to nothing about this kind of stuff. Is it possible they modified the site database? You may have to get a hold of the web host, and see what they can do.

that f-n sucks. stupid little cyber rats.

Devastator wrote:I'm not what's happened with the server exactly, but I can tell you that all of the files and such on the site are still intact. It seems the hack just re-directs people if they try to access any page to the site. If I can't figure out how to fix this mess and Pepie is unable to help, then the only thing we'll be able to do is move to another server. We'll only be able to do that with some generous donations if it comes to that.

What kind of bandwidth does this place pull down a month? Cause my current host's basic plan includes 400gigs of transfer.

If all the PHP and gallery stuff is still intact then recovering it shouldn't be to hard to do really. Probably still above my abilities, but I'd assume that they jsut did a butcher job on the index and config files to redirect it all. Had the same thing done my own site a year or two ago. Assuming someone has been making backups of the site you should jsut beable to upload an older version of the core files and hopefully it will correct it.

Thats about the level of my current understanding so if its more then that hopefully you can ge ahold of Pepie and the site can be brought back online.

I think you're right tentagil. The config file was all messed up, by I think I may have deleted my old copies of the the old config file. I was at least able to get the damn cracker message off of the homepage.

Any chance you have a copy of whatever the frontend software you running the site on? You could probably grab the config from that and edit with the info for the site.

Edit: And jsut looked at the main site. I haven't used postnuke but I have some limited experience with PHPnuke and CPGnuke/Dragonfly.

Postnuke is based off of PHPnuke, and unfortunately shares several of its security holes. Dragonfly is much more secure, but is also much newer and doesn't have nearly as many of the modules, and since they try to keep things more secure modules are developed a bit slower then with Post and PHPnuke.

Looking at a Postnuke config file though they have the same basic setup. You can download the postnuke package and extract an unaltered config file from it then add in the info for the site. I think that might fix some of the problem.

I think I have a copy of the software, but I'm not sure. Pepie set all of this up and I downloaded some mysql thing 'cause I think that's what he use. I have no idea of what to do with it though.

Well at least we, as a community, spend our time more constructively. We'll get things a'goin' again! You just can't keep good bots down!




. . . and when they do get damaged in battle, we take 'em to the repair bay for "reformatting." It's just what we all do.

another thing to look at, and I'm pretty sure that Pepie would have removed it already; but make sure that there isn't an install.php file in main directory with the config and index file. If it got left in there or the hackers added on it makes for easy access to do this all over again later. So delete that if its there.