Six hours ago my forum was hacked. The config.inc.php was replaced with this text. I replaced that file with a previous file, but now I'm getting "we encountered an error" messages - maybe it was a previous version? How do I fix this error - and how do I prevent the hack from occurring again?
The replacement file looked like this:
----------
<html dir="rtl">
<head>
<meta http-equiv="Content-Language" content="ar-jo">
<meta http-equiv="Content-Type" content="text/html; charset=windows-1256">
<title>SQL Was Here</title>
</head>
<body bgcolor="#000000">
<p align="center">
<img border="0" src="http://i1-news.softpedia-static.com/images/news-700/MySQL-Com-Hacked-by-D35Mond142-Member-Credentials-Leaked.gif" width="650" height="318"></p>
<p align="center"><b><font size="5" color="#FF0000"><span lang="en-us">Mahmoud
SQL </span></font></b></p>
<p align="center"><b><span lang="en-us"><font size="5" color="#FF0000">For
Contact</font></span></b></p>
<p align="center"><b><span lang="en-us"><font size="5" color="#FF0000">
[email protected]</font></span></b></p>
<p align="center"><span lang="en-us"><font size="5" color="#FF0000"><b>
facebook.com/alaqarbawi</b></font></span></p>
<p align="center"> </p>
<p align="center"> </p>
<object width="400" height="40"
classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000"
codebase="http://fpdownload.macromedia.com/
pub/shockwave/cabs/flash/swflash.cab#version=8,0,0,0">
<param name="SRC" value="http://error-404.do.am/50256-h4ck3d.swf">
<embed src="bookmark.swf" width="400" height="40">
</embed>bookmark.swf
</object>
</body>
</html>
