XF 2.1 DNS breech - clear sessions?

[sudrien]

Apparently our GoDaddy account was hacked with an old password (It's been updated).

I read a /library/config.php has a cookie key - but that was a 1.5 post I have 2.1.

How can I invalidate current sessions?

 

[Paul B]

If you use MySQL to store sessions, you can empty/truncate the xf_session table, or restart MySQL to force log out all users.

Otherwise you can set a new cookie prefix: https://xenforo.com/xf2-docs/manual/config/#cookie-settings