XF 1.4 IMMDEIATE HELP!

[Rum Runner Entertainment]

Someone was able to get into the admin panel of my forums and now is deleting everything.

Is there a way to protect this from happening andy I've also backed up everything on a hardirve? Please help.

Thank you,
Oren Segal

 

[Martok]

I'm not sure, but I don't think so, though we've been fine, so...

I'll have to check with @Nights as that would be his area of expertise.

If you don't know then you haven't. I'm correct too, just checked. You should upgrade XenForo to the latest version too.

It's very easy to do, here's the resource on how to do this.

https://xenforo.com/community/resou...and-the-install-directory-using-htaccess.353/

 

[Amaury]

If you don't know then you haven't. I'm correct too, just checked. You should upgrade XenForo to the latest version too.

It's very easy to do, here's the resource on how to do this.

https://xenforo.com/community/resou...and-the-install-directory-using-htaccess.353/

Well, Nights, like many others, took the lazy way out and just installed the patch.

But yeah, I'll let him know of this (thanks!), though we've actually never had problems, fortunately. We were hacked once back on vBulletin, but it wasn't anything major and it was from an admin that betrayed us.

 

[Rum Runner Entertainment]

If you don't know then you haven't. I'm correct too, just checked. You should upgrade XenForo to the latest version too.

It's very easy to do, here's the resource on how to do this.

https://xenforo.com/community/resou...and-the-install-directory-using-htaccess.353/

Thank you very much I will add this in

 

[Rum Runner Entertainment]

Oh I apologize @Brogan I forgot about it. Just from ANY backup, I will be able to get my nose tree as well as my user groups as well as deleted members?

I just want to make sure because I was told that I need a backup of the SQL to restore those.

 

[Paul B]

You will need to restore the database using a viable, complete backup.

 

[Rum Runner Entertainment]

Alright, thank you. So I need just a complete backup all the files? That's all?

 

[Andrej]

A complete backup of the forum database.

 

[TPerry]

I hope you have password protected the ACP too and change the password for this on a regular basis.

I don't password protect my admin panel at all. Any account that has ANY access to the back end is required to utilize it.

This works well for me.

 

[Rum Runner Entertainment]

I don't password protect my admin panel at all. Any account that has ANY access to the back end is required to utilize it.

This works well for me.
View attachment 85326

Oh, that's very helpful.

Also, at the moment, I am uploading all forums back up files.

 

[Robust]

The files don't really matter unless the administrator had access to your files, which is essentially being a super administrator and very bad practice.

You need to restore your MySQL database. That's where all the users etc are stored, not in your files. I recommend closing your board during the process.

 

[Robust]

I don't password protect my admin panel at all. Any account that has ANY access to the back end is required to utilize it.

This works well for me.
View attachment 85326

I use that, the obvious admin username and pass, htpasswd and an IP whitelist. Four layers you can assume.

 

[TPerry]

I use that, the obvious admin username and pass, htpasswd and an IP whitelist. Four layers you can assume.

I used to use .htpasswd but more hassle than worth it for me. Can't use an IP Whitelist since I don't always log in from set IP's (sometimes the iPad on cellular or frequently from some clients if something is going on). Biggest thing was remembering to put the GA app on my two phones and set the authentication up at the same time.

 

[Robust]

I used to use .htpasswd but more hassle than worth it for me. Can't use an IP Whitelist since I don't always log in from set IP's (sometimes the iPad on cellular or frequently from some clients if something is going on). Biggest thing was remembering to put the GA app on my two phones and set the authentication up at the same time.

I keep mine in /etc/nginx/pass and I have a unique one for access roles, and I make sure it's completely unique and has nothing to do with the person themselves, but something they'll easily remember. Dog name, girlfriend name, etc for username and password anything harder related to that. Slightly strange but I think it's pretty sweet.

As for ips, my partner is dynamic and personally I'm out and about a lot. I usually whitelist ranges in CIDR format, better than allowing everything huh.

GA for admin panel does get a tad annoying sometimes, but I don't really make any administrator use it, it's just optional for someone. I think it'd be overkill if I forced it on people, especially when you access the admin panel a lot.

 

[Rum Runner Entertainment]

The files don't really matter unless the administrator had access to your files, which is essentially being a super administrator and very bad practice.

You need to restore your MySQL database. That's where all the users etc are stored, not in your files. I recommend closing your board during the process.

Wait, so things like user groups, deleted members, node tree etc. is in the SQL database?

So I need to upload that? What if I don't have a backup of that? Then all of that would be lost then??

 

[Robust]

Wait, so things like user groups, deleted members, node tree etc. is in the SQL database?

So I need to upload that? What if I don't have a backup of that? Then all of that would be lost then??

You're correct.

If you use shared hosting your host may have a copy of it. I know a lot of hosts use things like rdsoft and take perhaps daily backups or so of the files and keep them for a limited time before deleting.

 

[Paul B]

Everything except avatars and attachments is in the database.

 

[Rum Runner Entertainment]

You're correct.

If you use shared hosting your host may have a copy of it. I know a lot of hosts use things like rdsoft and take perhaps daily backups or so of the files and keep them for a limited time before deleting.

Ah okay because I don't have a copy of it at all. So I hope GoDaddy has a copy of a recent backup. If they don't then.. I don't know.

 

[TPerry]

Ah okay because I don't have a copy of it at all. So I hope GoDaddy has a copy of a recent backup. If they don't then.. I don't know.

If they don't, and you didn't export the DB via phpmyadmin - you have lost that data/info.
Good lesson to learn... back up regularly. Don't depend on your host to do it for you.
To often the hosts backups are bad and then you are screwed.
Let this be a learning lesson about user/owner performed backups. That's the only way you can be sure it's done (and done correctly because you can test it).

 

[Rum Runner Entertainment]

If they don't, and you didn't export the DB via phpmyadmin - you have lost that data/info.
Good lesson to learn... back up regularly. Don't depend on your host to do it for you.
To often the hosts backups are bad and then you are screwed.
Let this be a learning lesson about user/owner performed backups. That's the only way you can be sure it's done (and done correctly because you can test it).

Yes, I've learned, but I never thought I would need that data though.

Ehh, if I can't get it, I will just close my forums down, there's no use. I've put a years' work into that and just having it being taken away just really takes the pressure off of my shoulders. Obviously I could use my license towards something else worth my wild, but I've learned my lesson.

I will re-post if I retrieve the data.

Thanks

 

[Robust]

Godaddy may have a backup, it may be corrupted in parts (they don't lock tables ofc) but I'm sure it can be fixed as long as you've got the basic amount of information. Try them, but I'm not sure if it'd be of use. You should be taking weekly backups as an administrator, so this is kinda a lesson for next time.