<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0">
	<channel>
		<title><![CDATA[Latest posts for the topic "Hacked - any help?"]]></title>
		<link>https://proxy2.de/forum/posts/list/5.php</link>
		<description><![CDATA[Latest messages posted in the topic "Hacked - any help?"]]></description>
		<generator>JForum - http://www.jforum.net</generator>
			<item>
				<title>Hacked - any help?</title>
				<description><![CDATA[ Hi. My guestbook wsa hacked, something about Popo and a black screen. I looked around in PHPMyAdmin and could find it. I brought up admin.php and got the right screen but couldn't get into the 'easy admin' to delete any posts (black screen again). I did delete some in PHPMyAdmin. But I changed the userID and password to test and 123 and now I can't get into then admin at all. Argh!<br /> <br /> Now I have two problems. Can't get into admin and still need to fix the hack! Can someone please help? <br /> <br /> <a class="snap_shots" href="http://www.obsessed-with-music.com/koobtseug/" target="_blank" rel="nofollow">http://www.obsessed-with-music.com/koobtseug/</a><br /> <br /> Thank you so much...<br /> <br /> stevendude]]></description>
				<guid isPermaLink="true">https://proxy2.de/forum/posts/preList/5091/18389.php</guid>
				<link>https://proxy2.de/forum/posts/preList/5091/18389.php</link>
				<pubDate><![CDATA[Sat, 15 Oct 2005 20:23:48]]> GMT</pubDate>
				<author><![CDATA[ stevendude]]></author>
			</item>
			<item>
				<title></title>
				<description><![CDATA[ Well you appear to have patched against the 2.2 logiin exploit and have HTML disabled so al I can assume is they got access some other way. When you say you cannot access the admin what do you mean? The link for the admin is <a class="snap_shots" href="http://www.obsessed-with-music.com/koobtseug/admin.php" target="_blank" rel="nofollow">http://www.obsessed-with-music.com/koobtseug/admin.php</a> and if they have changed the username and password then goto www.carbonize.co.uk/AG and download the password reset script.]]></description>
				<guid isPermaLink="true">https://proxy2.de/forum/posts/preList/5091/18393.php</guid>
				<link>https://proxy2.de/forum/posts/preList/5091/18393.php</link>
				<pubDate><![CDATA[Sun, 16 Oct 2005 12:20:30]]> GMT</pubDate>
				<author><![CDATA[ Carbonize]]></author>
			</item>
			<item>
				<title></title>
				<description><![CDATA[ Thank you. I did already know the URL for the admin. I get the login screen when I go there. I came to this message board yesterday and looked at some previous messages to try to figure this out. I went into PHPMyAdmin and ran a SQL statement that was supposed to reset the userid/password to test/123. But I can not get in using that. <br /> <br /> This is what is in book_auth:<br />   1 test 773359240eb9a1d9 7d8b85294e2e060b83f596a4fc5561ce 20051015110401 <br /> <br /> I assume that password equates to 123. But when I use test and 123 it doesn't let me in. <br /> <br /> Thanks for your help. What to try next?<br /> <br /> stevendude]]></description>
				<guid isPermaLink="true">https://proxy2.de/forum/posts/preList/5091/18404.php</guid>
				<link>https://proxy2.de/forum/posts/preList/5091/18404.php</link>
				<pubDate><![CDATA[Sun, 16 Oct 2005 23:59:09]]> GMT</pubDate>
				<author><![CDATA[ stevendude]]></author>
			</item>
			<item>
				<title></title>
				<description><![CDATA[ As I said goto www.carbonize.co.uk/AG and download the reset script.]]></description>
				<guid isPermaLink="true">https://proxy2.de/forum/posts/preList/5091/18405.php</guid>
				<link>https://proxy2.de/forum/posts/preList/5091/18405.php</link>
				<pubDate><![CDATA[Mon, 17 Oct 2005 07:40:00]]> GMT</pubDate>
				<author><![CDATA[ Carbonize]]></author>
			</item>
			<item>
				<title></title>
				<description><![CDATA[ OK, thanks, I did as you suggested. I downloaded and ran the script at www.carbonize.co.uk/AG. I cut and pasted my database password in the config.inc.php file under $GB_DB["pass"], and I pasted the password into the field on the reset screen. When I clicked submit, I got: "Could not reset the username and password because: " and then nothing else.<br /> <br /> What can I try next?<br /> <br /> Thank you much for your time, I appreciate it.<br /> <br /> stevendude]]></description>
				<guid isPermaLink="true">https://proxy2.de/forum/posts/preList/5091/18407.php</guid>
				<link>https://proxy2.de/forum/posts/preList/5091/18407.php</link>
				<pubDate><![CDATA[Tue, 18 Oct 2005 04:20:11]]> GMT</pubDate>
				<author><![CDATA[ stevendude]]></author>
			</item>
			<item>
				<title></title>
				<description><![CDATA[ Go into phpMyAdmin and select the correct datatabse (if you have more than one). You should then have a lst of all the tables in that database in the left hand pane. Look for [b]book_auth[/b] and click it. You should now see the structure of [b]book_auth[/b] in the right hand pane. Click the browse tab. Now in the row marked [b]password[/b] type your new password into the far right text box. The third coloumn is marked [b]Function[/b]/ Select [b]password[/b] on the password row. Whilst you are in this table type in a new username as well then click [b]Go[/b] and that should be it.]]></description>
				<guid isPermaLink="true">https://proxy2.de/forum/posts/preList/5091/18408.php</guid>
				<link>https://proxy2.de/forum/posts/preList/5091/18408.php</link>
				<pubDate><![CDATA[Tue, 18 Oct 2005 07:38:23]]> GMT</pubDate>
				<author><![CDATA[ Carbonize]]></author>
			</item>
			<item>
				<title></title>
				<description><![CDATA[ Yes! Thank you! That did work, now I can get into the admin functions. I can click on every option but when I click on 'Easy Admin', I see the screen start to load and then it goes to the black screen with the hack. It is all black and says:<br /> <br />  H4Cked By PoPo<br /> <br /> BHS-Team <img src="https://proxy2.de/forum//images/smilies/8a80c6485cd926be453217d59a84a888.gif" /><br /> <br /> Please help once more,<br /> <br /> Thanks,<br /> <br /> stevendude]]></description>
				<guid isPermaLink="true">https://proxy2.de/forum/posts/preList/5091/18409.php</guid>
				<link>https://proxy2.de/forum/posts/preList/5091/18409.php</link>
				<pubDate><![CDATA[Tue, 18 Oct 2005 07:47:58]]> GMT</pubDate>
				<author><![CDATA[ stevendude]]></author>
			</item>
			<item>
				<title></title>
				<description><![CDATA[ email me the admin login details and I will delete it. <a class="snap_shots" href="mailto:webmaster@carbonize.co.uk">webmaster@carbonize.co.uk</a>]]></description>
				<guid isPermaLink="true">https://proxy2.de/forum/posts/preList/5091/18410.php</guid>
				<link>https://proxy2.de/forum/posts/preList/5091/18410.php</link>
				<pubDate><![CDATA[Tue, 18 Oct 2005 10:49:51]]> GMT</pubDate>
				<author><![CDATA[ Carbonize]]></author>
			</item>
			<item>
				<title></title>
				<description><![CDATA[ Thanks. I just emailed the info to you. If possible can you let me know how you fixed it so in case it happens again I won't have to bother you. I really appreciate your time helping though.<br /> <br /> Thank you...<br /> <br /> stevendude]]></description>
				<guid isPermaLink="true">https://proxy2.de/forum/posts/preList/5091/18436.php</guid>
				<link>https://proxy2.de/forum/posts/preList/5091/18436.php</link>
				<pubDate><![CDATA[Wed, 19 Oct 2005 06:29:32]]> GMT</pubDate>
				<author><![CDATA[ stevendude]]></author>
			</item>
			<item>
				<title></title>
				<description><![CDATA[ fixed]]></description>
				<guid isPermaLink="true">https://proxy2.de/forum/posts/preList/5091/18437.php</guid>
				<link>https://proxy2.de/forum/posts/preList/5091/18437.php</link>
				<pubDate><![CDATA[Wed, 19 Oct 2005 07:38:23]]> GMT</pubDate>
				<author><![CDATA[ Carbonize]]></author>
			</item>
			<item>
				<title></title>
				<description><![CDATA[ [quote="stevendude"]Thanks. I just emailed the info to you. If possible can you let me know how you fixed it so in case it happens again I won't have to bother you. I really appreciate your time helping though.<br /> <br /> Thank you...<br /> <br /> stevendude[/quote]<br /> <br /> <br /> It isnt hard. You just go into the database and delete it there.]]></description>
				<guid isPermaLink="true">https://proxy2.de/forum/posts/preList/5091/18441.php</guid>
				<link>https://proxy2.de/forum/posts/preList/5091/18441.php</link>
				<pubDate><![CDATA[Wed, 19 Oct 2005 11:19:08]]> GMT</pubDate>
				<author><![CDATA[ JTD]]></author>
			</item>
			<item>
				<title></title>
				<description><![CDATA[ I just got the delete url from the source code.]]></description>
				<guid isPermaLink="true">https://proxy2.de/forum/posts/preList/5091/18443.php</guid>
				<link>https://proxy2.de/forum/posts/preList/5091/18443.php</link>
				<pubDate><![CDATA[Wed, 19 Oct 2005 13:23:26]]> GMT</pubDate>
				<author><![CDATA[ Carbonize]]></author>
			</item>
			<item>
				<title></title>
				<description><![CDATA[ Thank you thank you thank you!!!<br /> <br /> What is the best way to avoid this in the future? I don't want to lose any data.<br /> <br /> Thanks,<br /> <br /> stevendude]]></description>
				<guid isPermaLink="true">https://proxy2.de/forum/posts/preList/5091/18456.php</guid>
				<link>https://proxy2.de/forum/posts/preList/5091/18456.php</link>
				<pubDate><![CDATA[Thu, 20 Oct 2005 07:02:22]]> GMT</pubDate>
				<author><![CDATA[ stevendude]]></author>
			</item>
			<item>
				<title></title>
				<description><![CDATA[ goto www.carbonize.co.uk/AG and download the 2.2 login exploit patch.]]></description>
				<guid isPermaLink="true">https://proxy2.de/forum/posts/preList/5091/18457.php</guid>
				<link>https://proxy2.de/forum/posts/preList/5091/18457.php</link>
				<pubDate><![CDATA[Thu, 20 Oct 2005 10:31:01]]> GMT</pubDate>
				<author><![CDATA[ Carbonize]]></author>
			</item>
	</channel>
</rss>