Phpbb Forum Hacked!

[buggurl]

I need help! I keep my software up-to-date and I still get hacked. It's very frustrating and I don't know how to fix it. Right now, my forum is completely unusable. http://www.historique.net/cheval/

 

Can someone tell me how to fix it? Also, is there another board out there that is better? My skills in SQL and scripting are, well, rather limited. Limited in that I know next to nothing.

 

Any help at all would be appreciated!

[TCH-Bruce]

Please open a ticket with the help desk and have them take a look.

 

As for a different board that is more secure. None are secure unless you make them secure. Simple Machine Forums seems to be the one of choice most people running phpBB move to.

[TCH-Don]

You might open help desk ticket to the techs to see if they can help.

 

SMF seems to be stable and has a converter for Phpbb.

[buggurl]

I opened a ticket and Tech Support is working on it. I don't know what else I can do to make it more secure. Like I said, I keep all patches and software updates current. They might have some ideas. As far as switching to Simple Machines (thanks for the link), what does that entail? Do I download a converter?

 

"phpBB Converter php: Convert phpBB2 to SMF. Tested with 2.0.7."

[buggurl]

Hm, it looks pretty easy. Just upload the SMF file into my forum directory and execute? Can it be that simple?

[TCH-Bruce]

I would install SMF into another folder not your current forum folder. Then make a backup of your database and use it to convert so you do not destroy your existing forum.

[buggurl]

Oh, that makes sense. Thanks.

[Steve Scrimpshire]

I still suggest converting to SMF, but you say your software is up to date, but I see you are using phpBB 2.0.11 and the current version (as of 9 June 2006) is 2.0.21.

[buggurl]

That's odd. I installed the latest update, but that was actually before it was hacked. Not sure what happened there. I am trying to change over to SMF now, but I want to make sure I do it right.

 

I installed (from cPanel) an SMF discussion forum in /forum.

My current phpBB is installed in /cheval

 

How do I make the conversion?

 

I have the following files from SMF:

 

phpBB2_to_smf.php

convert.php

 

I also made an SQL backup in cPanel for the forum.

[buggurl]

Okay, I have everything set up correctly (from what I can tell). I ran 'convert.php' and filled in the phpBB2 directory and the SMF directory.

 

I get the following error message:

 

Sorry, the database connection information used in the specified installation of SMF cannot access the installation of phpBB2. This may either mean that the installation doesn't exist, or that the MySQL account used does not have permissions to access it.

 

The error MySQL gave was: SELECT command denied to user 'cheval_smf1'@'localhost' for table 'phpbb_users'

Edited November 24, 2006 by buggurl

[TCH-Bruce]

Have you added the SMF user to the phpBB database so it can access it?

[buggurl]

Thanks! That worked. Sorry, this is all new to me.

 

Oh bother. This must be due the hack. I don't know how to fix this either. These hacks are driving me mad! SMF seems much better and easier to keep updated. Can I edit/fix this in SQL so I can make the conversion?

 

Converting...

Converting ranks... Successful.

Converting groups... Successful.

Converting members... Unsuccessful!

This query:

INSERT INTO `cheval_smf1`.smf_members

(ID_MEMBER, memberName, realName, passwd, lastLogin, dateRegistered, location, posts, ID_GROUP, instantMessages, emailAddress, unreadMessages, MSN, AIM, ICQ, YIM, websiteTitle, websiteUrl, showOnline, timeOffset, hideEmail, avatar, signature, pm_email_notify, is_activated, lngfile, buddy_list, pm_ignore_list, messageLabels, personalText, timeFormat, usertitle, memberIP, secretQuestion, secretAnswer, validation_code, additionalGroups, smileySet, passwordSalt, memberIP2)

VALUES ('2', 'LuciferCihan', 'LuciferCihan', '9fc99ab5a8f9ab1023a03df00984c635', '1162426941', '1105464247', 'Hacked By LuciferCihan \" FICKE ALLE VON ARMENIAN,FRANZOSEN U DEUTSCHEN !!! FICK DICH 1000 MAL ISRAEL', '0', '1', '0', 'lcf@lcf.com', '0', 'Hacked By LuciferCihan \" FICKE ALLE VON ARMENIAN,FRANZOSEN U DEUTSCHEN !!! FICK DICH 1000 MAL ISRAEL', 'Hacked By Lucife', '', 'Hacked By LuciferCihan \" FICKE A', '', '', '1', '1', '1', '', 'acked By LuciferCihan \" FICKE ALLE VON ARMENIAN,FRANZOSEN U DEUTSCHEN !!! FICK DICH 1000 MAL ISRAEL', '0', '1', '', '', '', '', '', '', '', '', '', '', '', '', '', '', ''),

('3', 'Ingo', 'Ingo', '192c02071a66369482c58defdc6bbbc5', '1105465724', '1105465657', '', '0', '', '0', 'ingo.kosick@cityweb.de', '0', '', '', '', '', '', '', '1', '0', '1', '', 'schüß,

<br />Ingo', '1', '1', '', '', '', '', '', '', '', '', '', '', '', '', '', '', ''),

('4', 'vard7', 'vard7', '50cdad09753978c4992ed81a5bd19b33', '0', '1145359836', '', '0', '', '0', 'vard7@mailf.com', '0', '', '', '', '', 'http://mailf7.com', 'http://mailf7.com', '0', '-12', '0', '', '', '1', '1', '', '', '', '', '', '', '', '', '', '', '', '', '', '', ''),

('5', 'kreickmann', 'kreickmann', 'bf4d863f48b5cd6564d1a8f0a21f765f', '0', '1149637097', '', '0', '', '0', 'b.kreickmann@gmx.de', '0', '', '', '', '', '', '', '1', '0', '1', '', '', '1', '1', '', '', '', '', '', '', '', '', '', '', '', '', '', '', ''),

('6', 'borodpakt', 'borodpakt', 'ec6fb321527de2515e11a656e74eeac3', '0', '1157717832', '', '0', '', '0', 'borodpakt@medafo.info', '0', '', '', '', '', 'http://1jeuxvideo.com', 'http://1jeuxvideo.com', '1', '1', '1', '', '', '0', '1', '', '', '', '', '', '', '', '', '', '', '', '', '', '', ''),

('7', 'kotrenopf', 'kotrenopf', 'a0544d10723223f160132a920f77875d', '0', '1157850722', '', '0', '', '0', 'kotrenopf@norivo.info', '0', '', '', '', '', 'http://bestvhs.com', 'http://bestvhs.com', '1', '1', '1', '', '', '0', '1', '', '', '', '', '', '', '', '', '', '', '', '', '', '', ''),

('8', 'jtepiner', 'jtepiner', 'b36425a0160e384935b2f4bc1e3666ea', '0', '1158145156', '', '0', '', '0', 'jtepiner@medafo.info', '0', '', '', '', '', 'http://agrocery.com', 'http://agrocery.com', '1', '1', '1', '', '', '0', '1', '', '', '', '', '', '', '', '', '', '', '', '', '', '', ''),

('9', 'tedforpan', 'tedforpan', '755d6a6d62a4b36025d4a7a7b3308c04', '0', '1158315974', '', '0', '', '0', 'tedforpan@hiretin.info', '0', '', '', '', '', 'http://toysuk.net', 'http://toysuk.net', '1', '1', '1', '', '', '0', '1', '', '', '', '', '', '', '', '', '', '', '', '', '', '', ''),

('10', 'wkotohrof', 'wkotohrof', '8c6edc4f1871127938b99b886cf62d83', '0', '1158678052', '', '0', '', '0', 'wkotohrof@foteret.info', '0', '', '', '', '', 'http://softwaretoplist.com', 'http://softwaretoplist.com', '1', '1', '1', '', '', '0', '1', '', '', '', '', '', '', '', '', '', '', '', '', '', '', ''),

('11', 'dpirikont', 'dpirikont', 'b0f51d45dc7380ae841b33f45de1bfe8', '0', '1159262361', '', '0', '', '0', 'dpirikont@vitero.info', '0', '', '', '', '', 'http://magazinesde.info', 'http://magazinesde.info', '1', '1', '1', '', '', '0', '1', '', '', '', '', '', '', '', '', '', '', '', '', '', '', ''),

('12', 'lopatoketa', 'lopatoketa', '4f55c55897f1c6e9357012001c752739', '0', '1160103535', '', '0', '', '0', 'lopatoketa@ninoros.info', '0', '', '', '', '', 'http://caravelle.berisen.info', 'http://caravelle.berisen.info', '1', '1', '1', '', '', '0', '1', '', '', '', '', '', '', '', '', '', '', '', '', '', '', ''),

('13', 'frankern', 'frankern', '6718a7cee501a7ccdddc94e4206f10eb', '0', '1161144460', '', '0', '', '0', 'frankern@hiretin.info', '0', '', '', '', '', 'http://dating.kertam.info', 'http://dating.kertam.info', '1', '1', '1', '', '', '0', '1', '', '', '', '', '', '', '', '', '', '', '', '', '', '', ''),

('14', 'rojerge', 'rojerge', '2dc4757147382486700183a14ccf328e', '0', '1162105367', '', '0', '', '0', 'rojerge@betires.info', '0', '', '', '', '', 'http://homestead.mogesti.info', 'http://homestead.mogesti.info', '1', '1', '1', '', '', '0', '1', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '');

Caused the error:

 

Unknown column 'pm_email_notify' in 'field list'

[buggurl]

I messed around in the old (cheval) SQL database and deleted some hacked stuff.

I'm not sure what I did or how to do it again.

 

Now I get this message:

 

Converting...

Converting ranks... Successful.

Converting groups... Successful.

Converting members... Successful.

Converting additional member groups... Successful.

Converting categories... Successful.

Converting boards... Successful.

Converting topics... Successful.

Converting posts (this may take some time)... Successful.

Converting polls... Successful.

Converting poll options... Successful.

Converting poll votes... Successful.

Converting personal messages (step 1)... Unsuccessful!

This query:

TRUNCATE `cheval_smf1`.smf_personal_messages;

Caused the error:

 

Table 'cheval_smf1.smf_personal_messages' doesn't exist

[buggurl]

I still can't get past this. Does anyone know what to do? Is this something that needs to be added to the new database (SMF)?

[TCH-Bruce]

I've never done a conversion so I am not sure what you would need to do but the Simple Machine forums are quite active and I'm sure if you asked there someone would be able to help.

[buggurl]

I managed to get past the conversion issue, but the new forum was corrupted by the hack on the old one. I guess I'll need tech support to fix the old one before I can perform the conversion.

[TCH-Andy]

If you have a backup from before the hack - try using that one to restore from.

[buggurl]

Everything is pretty much messed up now. I haven't heard back from Tech Support in two days, so they must be on holiday. I really can't do anything until the hack is fixed. I need to covert over to SMF asap, but that won't work until the hack is fixed. My forum has been down for an entire week now.

[TCH-Andy]

There aren't any open tickets in L1 tech support - so I'm guessing it's closed. I would reopen it and ask for an update - or PM me the ticket ref, and I'll take a look.

[buggurl]

I just sent you a PM. Thanks!!!

[TCH-Andy]

Please have a look at your forum now - I think everything has moved over OK.

[buggurl]

Thanks for looking into it!

 

For some reason, the new forum will not accept my username and password now. It doesn't look like all the data/categories transferred over either, but I can't log in to make sure.

 

Thanks SO much for your help.

[TCH-Andy]

You're welcome - I'll see what I can do about getting some of the later data over.