my guestbook has been hacked, can anyone help?

Hi,

My guestbook has been hacked and the hacker has placed some vulgarity n offensive contents into my guestbook. Can anyone assist in clearing this hack n get my original guestbook entries back? Thanks.

http://www.sheltie-singapore.org/book

Your running version 2.3.1. Let me guess you had html enabled. Sorry unless you run carbs password reset script you cant do anything.

Now if they had used search or even bothered just to look at the list of threads in this forum she would of seen a large thread with pretty much the same subject. HTML is disabled. www.carbonize.co.uk/reset.zip i a script to reset the username and password. If you still cannot delete the post send me the username and password and I will do it.

Sorry for the trouble.

I realized that the hack was done in his entry on my guestbook and I've thus deleted those ugly contents directly from mySQL database.

I've also reset my admin username n password and can now get back into the admin panel.

Thanks.

Well I hope you also disabled the use of html. Since that is what caused the problem to begin with.

Yep, I've done that. Thanks.

How does someone reset the admin username and password? My guestbook also got hacked into, I figured out how to delete the post (in phpmyadmin), but can't get into my guestbook admin to disable html. I am not very computer literate, can someone please help this fool? LOL I have cpanel. my guestbook is here:
http://www.stormtrooper108.com/guestbook/
Thanks in advance!

Stormtrooper wrote:How does someone reset the admin username and password? My guestbook also got hacked into, I figured out how to delete the post (in phpmyadmin), but can't get into my guestbook admin to disable html. I am not very computer literate, can someone please help this fool? LOL I have cpanel. my guestbook is here:
http://www.stormtrooper108.com/guestbook/
Thanks in advance!

I just reset your login name and password to the defaults. You need to use carbs reset script and exploit script to prevent things like this from happening again. Also disable html.

Thanks for your help, I think I ran the exploit script correctly.

Stormtrooper wrote:Thanks for your help, I think I ran the exploit script correctly.

Yes you did. Congrats.