forum.coppermine-gallery.net

Support => cpg1.4.x Support => Older/other versions => cpg1.4 miscellaneous => Topic started by: Acen8s on January 30, 2010, 10:43:57 pm

Title: I've been hacked and I need some help
Post by: Acen8s on January 30, 2010, 10:43:57 pm
My gallery at www.pro-dezign.com/coppermine/index.php (http://www.pro-dezign.com/coppermine/index.php) has been hacked and I can't locate the hack. My login info had been changed but I managed to work that out. The problem now is that every image when clicked goes to a dysfunctional 404 file. I've re-installed all the files in my gallery except, Album and the theme template that I'm using.

There is a file in my root directory named "open" that I've never seen before and that I can not edit in any way. I believe that this may be the culprit but I can't delete it, change permissions, nothing.

I hope that I posted this in the right category. All help and advice will be greatly appreciated.
Thanks
Title: Re: I've been hacked and I need some help
Post by: Jeff Bailey on January 30, 2010, 10:51:46 pm
Try this Yikes, I've been hacked! Now what? (http://forum.coppermine-gallery.net/index.php/topic,51927.0.html).
www.pro-dezign.com/coppermine/index.php  not safe for work
Title: Re: I've been hacked and I need some help
Post by: Nibbler on January 30, 2010, 11:13:23 pm
To deal with files you don't have permission to delete you need to talk to your webhost. The 404 error is probably due to the hack having replaced the (hidden) .htaccess file in your gallery root (that's part of the SEF urls plugin) with something else. Replace that file with a clean copy.
Title: Re: I've been hacked and I need some help
Post by: Acen8s on January 31, 2010, 03:18:33 pm
First of all let me apologize for not doing the NSFW. In my defense, it's not porn, just pretty girls.
I've followed your advice and instructions and am back to normal. The hack was in one of the plug-ins. I don't know which plug-in was
infected because I deleted them all, per your instructions, and replaced them.

Your advice and support was great and I really appreciate your help. If you have any tips, tricks that would help prevent this from happening again I would really like to hear them.

Thanks again
Acen8s
Title: Re: I've been hacked and I need some help
Post by: Nibbler on January 31, 2010, 03:55:55 pm
You need to keep your gallery up to date. That's the only 'trick' you need.