>>
Site Map
>>
Forums
>>
PHP-Nuke Security
Forum module - topics in forum:
PHP-Nuke Security - Been hacked? or have a question about securing your site, here's the place.
All posts missing after hack?
Hello,
A bloke I know has had his nuke/phpbb site hacked, none of the actual files have been altered. but the mysql database has been changed. He is using a version of nuke from 2005, but I could not find the actual version number in any of the php files I looked in.
He has asked me the following question, I assume the answer is that it IS possible, but thought I should ask here before giving him a definate answer.
THE QUESTION: Would it have been possible for the hacker to use a mysql injection exploit to remove ALL the posts in one easy sweep, as all of the posts are gone, but private messages and some other data is still in the database?
The hacker also added his own admin account etc... Changed the templates to display a 'Hacked By' type message and so on...
If someone could please either complain or correct me, I would be extremely grateful.
Thanks in advance
Kob.
| Quote: : |
Would it have been possible for the hacker to use a mysql injection exploit to remove ALL the posts in one easy sweep, as all of the posts are gone, but private messages and some other data is still in the database?
|
Yes.