Messages posted by: Carbonize

I'll look at the files you sent me and send them back later.

That is because it has been included. The only way to integrate Advanced Guestbook is to either use an iframe or edit the header.php and footer.php templates.

Only way to find your database password is to find a script that also contains it. Or make a new database account and give it access to the appropriate database then use that info.

You were logging IPs or you had the script logging IPs?

Does sound like someone gained access but if there was an exploit in the script it would of been wider abused by now. As I said update to 2.0.7 and keep your fingers crossed. If it happens again I will tell you how to make the admin even more secure.

Well when you say removed the log file which log are you refering to? Also you might want to update to the latest version of Advanced Poll. As to getting yur info they could of brute forced it or possibly infected your computer with a keylogger but I doubt this.

You say they corrupted all data. Care to elaborate?

Well it's set right. Wonder if there's now a problem in the script. Maybe he messed something up in 2.4.2. My wonderful employer wont let me download zips so can you send me a copy of comment.php and lib/comment.class.php so I can have a look.

Thats just a problem with your server that your hosts will hopefully be working on.

Your robots.txt is fine. Not 100% on the error though.

Would it be possible for you to post a screenshot of the relevant part of General Settings or give me access?

So long as the box is ticked and the password has been supplied it should appear. Maybe you are missing a template such as com_pass.php.

You would need to run install.php again on the second guestbook. I can't remember but I'm sure the installer takes the table names from the config file.

When you ticked the box in General Settings did you also provide a password in the box?

You have put them in a file ending in .php and not .htm or .html?

It's below where you tick the box.

Email me on webmaster[at]carbonize[dot]co[dot]uk. But yes it is the database password that is required for the reset script and this is the strange set of characters you refer to.