Advanced search  

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: CPG has been HACKED  (Read 3244 times)

0 Members and 1 Guest are viewing this topic.

stemmen

  • Coppermine newbie
  • Offline Offline
  • Posts: 1
CPG has been HACKED
« on: August 28, 2006, 04:16:36 pm »

My gallery has been hacked.

They put their signature in my config-file. How can I restore it so the gallery works again?

Reg. Jan!
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47844
  • aka "GauGau"
    • gaugau.de
Re: CPG has been HACKED
« Reply #1 on: August 28, 2006, 04:30:26 pm »

Best bet: restore from your backup (if you have one).
If you don't have a backup you could restore, download the entire content of your coppermine folder to your local hard drive, then examine what they did. Replace broken / modified files with clean ones from the package. Do the same thing with your database (create a dump and examine it). Pay particular attention to any backdoors (e.g. admin accounts) the attackers might have left. Change all your passwords (coppermine admin, FTP password, mySQL password) and reflect the changes by editing your_coppermine_folder/include/config.inc.php
Don't use trivial passwords. Review your server logs if you have access to them.
Make sure to upgrade your gallery to the most recent stable version of coppermine (currently cpg1.4.9) - you probably got hacked because you used outdated versions that have security flaws.

As you posted a generic question, above answers may appear generic to you as well. If you need details, search the board for similar questions (as this has been asked and answered before, and we're reluctant to repeat ourselves over and over). If you can't find the answers you need by searching, post more details (a link to your coppermine-driven gallery might be a good start).
Logged
Pages: [1]   Go Up
 

Page created in 0.013 seconds with 20 queries.