XF 2.2 My new forum got hacked, what I should do please?

KhanTastic

KhanTastic

Active member
Hi friends,

I purchased a new domain, setup my new forum, did all the hard work and now after days when I went to my website, the browser shows warning message and says its risky to visit that page.
Please let me know how I can put my forum under maintenance manually visa cPanel a I do not want to proceed visiting my site by forcing the browser and take the risk of effecting my laptop.
I am worried about all my hard work I did on work, will lost all the categories and posts.
Which files I should not replace so that I will not lose my work, I am thinking of replacing all the files with the fresh copy but worried of losing data.
Also how I Can put my site under maintenance manually via cPanel please.

Appreciate your help.

Best regards,
Khan
 
Sort by date Sort by votes
KhanTastic said:
I purchased a new domain, setup my new forum, did all the hard work and now after days when I went to my website, the browser shows warning message and says its risky to visit that page.
Click to expand...
Sounds to me like it could either be some misconfigured https, or then sometimes new domains can fall into the "safe browsing"-list and needs to be reported as "not malicious" https://safebrowsing.google.com/safebrowsing/report_error/?hl=en

But yes, as @otto wrote, a screenshot would be needed to help further..

Also, if a warning page is shown, there is usually also a "show more" or "advanced" button/link to see more info about why the browser complains...
 
Upvote 1 Downvote
KhanTastic said:
Hi friends,

I purchased a new domain, setup my new forum, did all the hard work and now after days when I went to my website, the browser shows warning message and says its risky to visit that page.
Please let me know how I can put my forum under maintenance manually visa cPanel a I do not want to proceed visiting my site by forcing the browser and take the risk of effecting my laptop.
I am worried about all my hard work I did on work, will lost all the categories and posts.
Which files I should not replace so that I will not lose my work, I am thinking of replacing all the files with the fresh copy but worried of losing data.
Also how I Can put my site under maintenance manually via cPanel please.

Appreciate your help.

Best regards,
Khan
Click to expand...
Are you sure it wasn't a demo site you used?
 
Upvote 1 Downvote
BCavender said:
It may not be a hack issue... do you have any anti-virus or web browser (anti-virus related) extensions installed?
What is your site?
Click to expand...
Thanks your reply,
it is hacked because I have other wordpress sites on same hosting they got totally hacked, so they have affected my XenForo forum as well.

I just do not want to lose my forum structure and posts, how I can replace the files from fresh files of XF? Which files should not be replaced please. :(
 
Upvote 1 Downvote
otto said:
Can you please scrreenshot the exact message do you see when visit your site?
Do you have no backup taken after install and setup?
Click to expand...
mazzly said:
Sounds to me like it could either be some misconfigured https, or then sometimes new domains can fall into the "safe browsing"-list and needs to be reported as "not malicious" https://safebrowsing.google.com/safebrowsing/report_error/?hl=en

But yes, as @otto wrote, a screenshot would be needed to help further..

Also, if a warning page is shown, there is usually also a "show more" or "advanced" button/link to see more info about why the browser complains...
Click to expand...
Yes I will share my screenshot when I am on my computer, thank you so much everyone for replying me so fast and trying to help me. You are great community, helping each other.
 
Upvote 1 Downvote
Thank you everyone for your help, I had one old backup of my forum, I imported that and now I see this error

An upgrade was found for a version of XenForo that is newer than the uploaded files. Please reupload all of the files for the new version and reload this page.

I can login to my forum now but I can not do anything as it shows that message as I mentioned above. I downloaded the latest version upgrade pack only from the XF account and reuploaded and ran the mydomain.com/install and now I see that error, can not do anything further :(

My wordpress sites killed my whole VPS server and its a big mess, I was hosting like ten websites and was running them for years. I am so stressed, lost my years hardwork, everything is effected :(
 
Upvote 1 Downvote
KhanTastic said:
Thank you everyone for your help, I had one old backup of my forum, I imported that and now I see this error

An upgrade was found for a version of XenForo that is newer than the uploaded files. Please reupload all of the files for the new version and reload this page.

I can login to my forum now but I can not do anything as it shows that message as I mentioned above. I downloaded the latest version upgrade pack only from the XF account and reuploaded and ran the mydomain.com/install and now I see that error, can not do anything further :(

My wordpress sites killed my whole VPS server and its a big mess, I was hosting like ten websites and was running them for years. I am so stressed, lost my years hardwork, everything is effected :(
Click to expand...
Change hosts. Wordpress is not good for you
 
Upvote 0 Downvote
Wordpress isnt insecure if the Wordpress admin has the knowledge to make the right settings to secure it. Its easy but you have to inform you BEVORE you bring a site online. Same for Xenforo and Security around own servers or vservers.
 
Upvote 1 Downvote
otto said:
Wordpress isnt insecure if the Wordpress admin has the knowledge to make the right settings to secure it. Its easy but you have to inform you BEVORE you bring a site online. Same for Xenforo and Security around own servers or vservers.
Click to expand...
Exactly, I just never touched Wordpress settings or did anything to secure them. I posted over 200 blog posts, spam was keep increasing and I was keep deleting and finally they got fully hacked and hackers inserted codes in every single file.
I learned a lot from my mistakes and lost years of hardwork too :(

Now I just installed my XF forum again fully fresh and looks perfect but need to spend again so much time on it to restructure it :(

I just want to thank everyone here, who added his/ her input on it and tried to help me. You guys are amazing and so helpful ❤️
 
Upvote 1 Downvote
KhanTastic said:
Now I just installed my XF forum again fully fresh and looks perfect but need to spend again so much time on it to restructure it :(
Click to expand...
Good luck restructuring!(y)
Tip: Malware is often found with Wordpress in for example leak themes. It wouldn't hurt to install Maldetect on your VPS. I don't know if you use a panel and which it is, but Maldetect can be run with and without a panel.
First time takes longer for inventory, after that it runs every night and even can move malicious code automatically to a quarantaine directory.
It's also not 100% fullproof but it detects a lot.
 
Upvote 0 Downvote
Black Tiger said:
Good luck restructuring!(y)
Tip: Malware is often found with Wordpress in for example leak themes. It wouldn't hurt to install Maldetect on your VPS. I don't know if you use a panel and which it is, but Maldetect can be run with and without a panel.
First time takes longer for inventory, after that it runs every night and even can move malicious code automatically to a quarantaine directory.
It's also not 100% fullproof but it detects a lot.
Click to expand...

Thanks a lot for the info, I used paid wordpress themes, I do not understand how my sites got attacked.
I will look into it Maldetect, thank you for letting me know about that, much appreciated.
 
Upvote 0 Downvote
You must log in or register to reply here.
Back
Top Bottom