Zen Cart Logo
Forums / Installing on a Linux/Unix Server / MY Admin has been HACKED?!

MY Admin has been HACKED?!

Locked

Views: 4,231

Results 1 to 12 of 12
This thread is locked. New replies are disabled.
8 Mar 2007, 2:30 PM
#1
jchrinko avatar

jchrinko

New Zenner

Join Date:
Dec 2006
Posts:
10
Plugin Contributions:
0

MY Admin has been HACKED?!

Somehow someway my admin has been hacked. I used my normal login (which was changed from the original) and it did not work. I clicked on Resend the password which came to my email. I entered it in 4 times but it did NOT let me in under the user name of "admin" (which is what is was). I believe they have changed the User Name??? ** How do I find out what the new User Name is??**

I've been on this forum for 2 hours trying to look up every thread before posting and I can not comprehend how to fix this. I do NOT know how to use PHP Myadmin at all.... can someone PLEASE have mercy and help me. We have a very active store and I have orders to process that are now past due.:blink:

8 Mar 2007, 4:34 PM
#2
schoolboy avatar

schoolboy

Totally Zenned

Join Date:
Jun 2005
Location:
Cumbria, UK
Posts:
10,327
Plugin Contributions:
0

Re: MY Admin has been HACKED?!

Hold on... I'm just working on something that will help you!!!

8 Mar 2007, 4:42 PM
#3
schoolboy avatar

schoolboy

Totally Zenned

Join Date:
Jun 2005
Location:
Cumbria, UK
Posts:
10,327
Plugin Contributions:
0

Re: MY Admin has been HACKED?!

Okay...

Do this...

I assume you have access to phpmyadmin?

If you do, log into phpmyadmin...

You're about to have your first lesson...

  1. When you've logged in, there are TWO columns.

  2. In the left column may be a dropdown window (if you have more than one database), and you are asked to choose one.

  3. In any event, select the database that is your SHOP database.

  4. Within a few seconds, the screen will refresh, and you'll now see all the TABLES in your database.

  5. Now... Look at this image :-

  1. Do what it says in the image...
8 Mar 2007, 4:55 PM
#4
schoolboy avatar

schoolboy

Totally Zenned

Join Date:
Jun 2005
Location:
Cumbria, UK
Posts:
10,327
Plugin Contributions:
0

Re: MY Admin has been HACKED?!

Oh... sorry...

When you're done in phpmyadmin, click the green EXIT button to log out.

8 Mar 2007, 6:58 PM
#5
jchrinko avatar

jchrinko

New Zenner

Join Date:
Dec 2006
Posts:
10
Plugin Contributions:
0

Re: MY Admin has been HACKED?!

Thanks Schoolboy!

Ok, small problem. I downloaded phpmyadmin from the internet to my desktop, then FTP'd it to my server. I called the URL in the browser and all I get is an error: www.buckscountychoppers.com/phpmyadmin/

Welcome to phpMyAdmin 2.10.0.2

Error

**MySQL said: **[IMG]http://www.buckscountychoppers.com/phpmyadmin/themes/original/img/b_help.png[/IMG]
#2002 - The server is not responding (or the local MySQL server's socket is not correctly configured)

I honestly don't know how to configure that software at all to get it to do what you are saying. Can you please assist further?

8 Mar 2007, 7:04 PM
#6
merlinpa1969 avatar

merlinpa1969

Totally Zenned

Join Date:
Mar 2004
Posts:
13,031
Plugin Contributions:
4

Re: MY Admin has been HACKED?!

how do you get to your database?

phpMyadmin or something like it should already be sotred on the server

8 Mar 2007, 7:21 PM
#7
jchrinko avatar

jchrinko

New Zenner

Join Date:
Dec 2006
Posts:
10
Plugin Contributions:
0

Re: MY Admin has been HACKED?!

I don't. I create a Database from my server's control panel, click run query and I'm done.

I am totally unfamiliar with phpmyadmin... but figured I'd do anything I could since you were kind enough to work with me. I uploaded it and it has an error.

I tried the setup.php page and input manually my database information but it is still not giving me that screen print you showed me at all. Just an error. :(

8 Mar 2007, 7:23 PM
#8
merlinpa1969 avatar

merlinpa1969

Totally Zenned

Join Date:
Mar 2004
Posts:
13,031
Plugin Contributions:
4

Re: MY Admin has been HACKED?!

if you can setup your db in the control panel then there should be a GUI for it there as well

thats all phpmyadmin is

8 Mar 2007, 8:21 PM
#9
jchrinko avatar

jchrinko

New Zenner

Join Date:
Dec 2006
Posts:
10
Plugin Contributions:
0

Re: MY Admin has been HACKED?!

i can not access it in the manner you are requesting. I can only run a query. It does not let me change or edit any of the database files. I can not even view the material on them. :(

8 Mar 2007, 10:24 PM
#10
merlinpa1969 avatar

merlinpa1969

Totally Zenned

Join Date:
Mar 2004
Posts:
13,031
Plugin Contributions:
4

Re: MY Admin has been HACKED?!

then you need to run this

INSERT INTO admin VALUES ('', 'admin', 'admin@localhost', '351683ea4e19efe34874b501fdbf9792:9b', 1);

this will create a new admin

username ad pass are admin ( lower case )

once you get in you need to create a real admin username and password and delete all the others

12 Mar 2007, 1:09 AM
#11
jchrinko avatar

jchrinko

New Zenner

Join Date:
Dec 2006
Posts:
10
Plugin Contributions:
0

Re: MY Admin has been HACKED?!

Merlin... thanks for sticking with me here. I was away all weekend and of course miserable knowing that this software wasn't working properly. HOWEVER, I have a bit of unsettling news. ** It was NOT the database being hacked.** It was my Server upgrading everyone (without them knowing) to PHP 5?! I was on with several tech support guys who were sending in tickets to their level 2 support to restore the database from a week ago when I got a "genius" on the phone who said... Oh, we just finished updating all our customers to PHP5 and that would cause your admin area to not work???!!! HELLLOOOO!!! What are people thinking??:shocking:

Anyway, he switched all 3 sites back to PHP4 which they were installed under and the problem is FIXED! Amen!!!

Thank you for the very effective help and kindness in your replies here on the forum! I HIGHLY recommend this software. I have switched from OsCommerce and have been very pleased.

12 Mar 2007, 10:11 AM
#12
schoolboy avatar

schoolboy

Totally Zenned

Join Date:
Jun 2005
Location:
Cumbria, UK
Posts:
10,327
Plugin Contributions:
0

Re: MY Admin has been HACKED?!

This sort of unilateral behaviour from hosts is all too common... and I believe it indicates why zen cart store owners ought to consider hosting ONLY with a host that truly understands zen cart.

An arbitrary decision by some propellor-head at the hosting company to do everyone a "favour" and "ugrade server software" can mean - for most zen cart stores A SERIOUS LOSS OF INCOME.

(Perhaps zenners should threaten to sue their hosts if any deliberate action on the host's part results in loss of income)???

.... or rather... just terminate your hosting at these sorts of places and get the zen professionals do it.