Forums / General Questions / Site is hacked, now I need to hack my own password in - Help?

Site is hacked, now I need to hack my own password in - Help?

Started by scatstroker on 19 Jun 2012, 7:02 AM · Views: 634

Results 1 to 3 of 3
19 Jun 2012, 7:02 AM
#1
scatstroker avatar

scatstroker

New Zenner

Join Date:
Oct 2005
Posts:
7
Plugin Contributions:
0

Site is hacked, now I need to hack my own password in - Help?

I've had an old site hosted for quite sometime that has been a victim of the security flaws in the earlier versions. I'm assuming it's the same type of issue as before but essentially someone has logged into the admin page added their own log ins and removed my log ins. Previously when this happened I contacted my server host and we were able to address it from that end. Unfortunately my host is now unresponsive and seems to have fallen off the face of the earth which means I no longer have that option. The version is 1.3.0.2 and has been active since 2005/2006 so it's definitely an older install.

What I'd like to do is update the site to version 1.5 on a new server. I would like to download my current catalog and cart information before doing so as to not have to reload all my products. I can do this by logging into the admin and using the easy populate tab if I can get a log in back into my site. I had another site of the same vintage and was able to log into it, although there were about 20 new admins they hadn't deleted my log in but after seeing so many of them it seems this security flaw is quite common and easily exploited.

I can pretty easily prove the site is mine as the contact us information still comes to me. It also lists my phone number and address on the site so if you're concerned about the authenticity of this request you can verify I am in fact the owner.

Can anyone help or point me in the right direction?

Site is: https://www.buyafr.com, my main site is www. a d p e r f o r m a n c e.com (you'll see the similarities)

Thank you for any assistance!

19 Jun 2012, 7:13 AM
#2
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,511
Plugin Contributions:
176

Re: Site is hacked, now I need to hack my own password in - Help?

You can get your database contents by doing a backup as described here: http://www.zen-cart.com/content.php?144-how-can-i-do-a-database-backup-with-phpmyadmin

You can get your site's PHP/image/etc files by using FTP to login and download to your PC.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

19 Jun 2012, 7:32 AM
#3
scatstroker avatar

scatstroker

New Zenner

Join Date:
Oct 2005
Posts:
7
Plugin Contributions:
0

Re: Site is hacked, now I need to hack my own password in - Help?

I should have added that ... the ftp log in doesn't work.

The server host was sold from someone who was a close friend in 2005 to someone who I don't even know if they're still in business (but the site works but I haven't been charged in 3+ years.) I have my log ins from 2005-2006 when I setup the site but they don't work now so I don't know if they've migrated the software, changed the log ins or what but I can't get in through ftp or I would have gone that route. I don't have access to the server host, the ftp or any of the back end, which is also why I'm changing the server host (which I do have access to the domain host, thank god.)

Thank you, but its difficult not having the server access on any level.