By the way, if I try to rebuild one of the 'broken' forums, I he thte following entry in the 'Hacklog.cgi' file:
HACK ATTEMPT DATE: 08-26-2001 11:01 PM
HackDetails
:106
application/x-www-form-urlencoded
/usr/local/etc/httpd/htdocs
CGI/1.1
*/*
en
Keep-Alive
UserNameCP=zzzzzzzz;
PasswordCP=zzzzzzzzz;
lastLogin=2452148.144; LastLoginDT=08-26-2001%2002%3A40%20PM
Security/Remote-Passphrase
161.58.193.73
http://161.58.193.73/cgi-bin/cpanel.cgi?action=UpdateThreads PPC
MacOS
Mozilla/4.0 (compatible; MSIE 5.0; Mac_PowerPC)
/bin:/usr/bin:/usr/ucb:/usr/bsd:/usr/local/bin
216.68.202.74
52866
POST
/cgi-bin/postings.cgi
/usr/local/etc/httpd/cgi-bin/postings.cgi
/cgi-bin/postings.cgi
161.58.193.73
Shirley_Server-Admin@16949.com
161.58.193.73
80
HTTP/1.1
Apache/1.3.12 OpenSSL/0.9.5a (Unix) PHP/4.0.4pl1
shirley
