The Energon Pub

Wed Aug 02, 2006 10:09 pm

I'm not what's happened with the server exactly, but I can tell you that all of the files and such on the site are still intact. It seems the hack just re-directs people if they try to access any page to the site. If I can't figure out how to fix this mess and Pepie is unable to help, then the only thing we'll be able to do is move to another server. We'll only be able to do that with some generous donations if it comes to that.

Wed Aug 02, 2006 10:15 pm

It hasn't replaced all the PHP files? That's good.

I know next to nothing about this kind of stuff. Is it possible they modified the site database? You may have to get a hold of the web host, and see what they can do.

Wed Aug 02, 2006 10:44 pm

that f-n sucks. stupid little cyber rats.

Wed Aug 02, 2006 11:44 pm

Devastator wrote:I'm not what's happened with the server exactly, but I can tell you that all of the files and such on the site are still intact. It seems the hack just re-directs people if they try to access any page to the site. If I can't figure out how to fix this mess and Pepie is unable to help, then the only thing we'll be able to do is move to another server. We'll only be able to do that with some generous donations if it comes to that.

What kind of bandwidth does this place pull down a month? Cause my current host's basic plan includes 400gigs of transfer.

Thu Aug 03, 2006 12:23 am

If all the PHP and gallery stuff is still intact then recovering it shouldn't be to hard to do really. Probably still above my abilities, but I'd assume that they jsut did a butcher job on the index and config files to redirect it all. Had the same thing done my own site a year or two ago. Assuming someone has been making backups of the site you should jsut beable to upload an older version of the core files and hopefully it will correct it.

Thats about the level of my current understanding so if its more then that hopefully you can ge ahold of Pepie and the site can be brought back online.

Thu Aug 03, 2006 1:23 am

I think you're right tentagil. The config file was all messed up, by I think I may have deleted my old copies of the the old config file. I was at least able to get the damn cracker message off of the homepage.

Thu Aug 03, 2006 2:34 am

Any chance you have a copy of whatever the frontend software you running the site on? You could probably grab the config from that and edit with the info for the site.

Edit: And jsut looked at the main site. I haven't used postnuke but I have some limited experience with PHPnuke and CPGnuke/Dragonfly.

Postnuke is based off of PHPnuke, and unfortunately shares several of its security holes. Dragonfly is much more secure, but is also much newer and doesn't have nearly as many of the modules, and since they try to keep things more secure modules are developed a bit slower then with Post and PHPnuke.

Looking at a Postnuke config file though they have the same basic setup. You can download the postnuke package and extract an unaltered config file from it then add in the info for the site. I think that might fix some of the problem.

Thu Aug 03, 2006 2:43 am

I think I have a copy of the software, but I'm not sure. Pepie set all of this up and I downloaded some mysql thing 'cause I think that's what he use. I have no idea of what to do with it though.

Thu Aug 03, 2006 2:47 am

Well at least we, as a community, spend our time more constructively.

We'll get things a'goin' again! You just can't keep good bots down!

. . . and when they do get damaged in battle, we take 'em to the repair bay for "reformatting." It's just what we all do.

Thu Aug 03, 2006 2:49 am

another thing to look at, and I'm pretty sure that Pepie would have removed it already; but make sure that there isn't an install.php file in main directory with the config and index file. If it got left in there or the hackers added on it makes for easy access to do this all over again later. So delete that if its there.

Thu Aug 03, 2006 4:23 am

Weirdwolf at the 2005 forums says that he's worked with PostNuke, before. He said you should just need to download the program, to get a new config.php, and change the settings to match the server settings.

Sorry, I know nothing about this. Just passing along, what I've been told.

Thu Aug 03, 2006 4:28 am

Man I am glad to see you guys....pleases do what you can to get it all back....all day yestreday I was like WTF!!!...stupid little hackers...someone hacked TFans too, but it wasnt this bad...

Thu Aug 03, 2006 7:46 am

I clicked on the link when the hacker page came up and it went to a forum in some crazy language like russian or something. Don't those people have anything better to do than mess with this site? At least Devs got rid of their stupid webpage and retarded music.

Unfortunately I know nothing about webpages... I'm sure we'll be able to find someone in the TF community who can help

Thu Aug 03, 2006 12:31 pm

well the way i see it we have the most capable people on the matter, and not to make fun of the community here but in some way we are all nerds in some aspect, someone here is bound to have the knowledge to unlock this matrix and light the darkest hour here at trasntopia, i believe in that and it helps keep me going.

Thu Aug 03, 2006 2:15 pm

I just noticed today that back on July 25, a guy tried to get in my site, but couldn't but left a bunch of crazy messages in my guestbook.....I have since deleted them today because they were just jibberish, but I did decide to do a back trace on his IP address and found out who the bastard was, and I posted his info on the page. See for yourself!

http://www.freewebs.com/sodawilly/sodawillysrantsnraves.htm

Hope everything gets worked out ok,

-Gregg

Thu Aug 03, 2006 2:40 pm

As long as there are websites on the internet, there will be little punk computer geek bastards with no friends living in their parents basement using terms like "Haxx0rz" who get their jollies off by hacking message boards just to show other little punk computer geek bastards how cool they think they really are, who will try to hack them. :roll:

It sucks! I wish I knew more about working a website but I don't. But if there's any other way to help out, let me know.

And TFM, don't give up. It's just a setback. Everyone here supports this site and doesn't want to see it go.

News Credits: 1 · Thu Aug 03, 2006 3:15 pm

Lobo wrote:As long as there are websites on the internet, there will be little punk computer geek bastards with no friends living in their parents basement using terms like "Haxx0rz" who get their jollies off by hacking message boards just to show other little punk computer geek bastards how cool they think they really are, who will try to hack them.

It sucks! I wish I knew more about working a website but I don't. But if there's any other way to help out, let me know.

And TFM, don't give up. It's just a setback. Everyone here supports this site and doesn't want to see it go.

Don't worry about me...I was just venting...

TFM

Thu Aug 03, 2006 3:32 pm

Lobo wrote: But if there's any other way to help out, let me know.

Yea, make a decepticon version of Perceptor (Hacker) and post pictures of your collection dismembering him :twisted:

Thu Aug 03, 2006 5:33 pm

Dev download a copy of Postnuke from thier website and extract the config file. Then open that file with wordpad and edit the following feilds.

$pnconfig['dbtype'] = 'mysql'; - assumeing your useing a mysql database leave this one alone
$pnconfig['dbtabletype'] = 'MyISAM'; - leave this alone as well
$pnconfig['dbhost'] = 'localhost'; - Leave this one as it is as well
$pnconfig['dbuname'] = ''; - This one should be the Username you use to log into the database
$pnconfig['dbpass'] = ''; - This one is the password to log into the database
$pnconfig['dbname'] = 'Phoenix'; - This one should be the actual database name
$pnconfig['system'] = '0'; Not sure if the site is hosted on a linux/unix based server or a windows based server, but if its linux=0 and windows=1

The rest can probably be left alone.

$pnconfig['prefix'] = 'pn';
$pnconfig['encoded'] = '1';
$pnconfig['pconnect'] = '0';
$pnconfig['temp'] = 'pnTemp';

Once you've edited those lines with the info on your database and server go ahead and save it and upload the config.php file on to the website. It should overwrite the hacked file and fix things a bit.

Thu Aug 03, 2006 6:51 pm

He he... sometimes it's good to know computer nerds. Other times, I'm sure it'd be handier to be a computer nerd...

AceBaur Prime wrote:I clicked on the link when the hacker page came up and it went to a forum in some crazy language like russian or something.

Like I said, Turkish. The flag was a giveaway, along with the fact that a couple of the hackers had 'turk' in their names...

Thu Aug 03, 2006 7:25 pm

tentagil wrote:Dev download a copy of Postnuke from thier website and extract the config file. Then open that file with wordpad and edit the following feilds.

Thanks for your help man. I put in all of my information and got nothing. Then I tried putting in what I thought Pepie's info was and that didn't work either. II'll keep trying though

Thu Aug 03, 2006 8:50 pm

Damn, I'm guessing no word from Pepie yet either?

I mean I know that you could fix it by installing a new copy of Postnuke on top of whats already there, but I'm not sure how much that might break other things. And you'd still need to know the proper info to set the config file to access the database. Without that info and without being able to see the actual file structure and such I'm pretty much out of ideas at this point.

Fri Aug 04, 2006 4:57 am

This sucks monkeyballs

Ofcourse i will help! Not gunna let my old buddies leave in utter frustation.

But.. cant even look at the files.. my FTP account doesnt work, pls send the needed info to me Dev/TFM and i will look into it asap.

Allso, information needed for the databse isnt bad either.. so i can look into it.
Do you have backups of the database btw ?

Cheers!

Fri Aug 04, 2006 5:09 am

Say you luv me :lol:

Seems stable atm.. i'll tell TFm and Dev the juice via mail.

Fri Aug 04, 2006 6:04 am

wow thanks pepie your much more then just a pritty face

The Energon Pub

Hacked??????

Who is online