UBB.threads PHP Forum Software Community Forums UBB.threads 6 Version 6 Support Forum Compromised!

Our forum has been compromised not a fault of ubbt I might add but someone got hold of an admin's password.

Now I've managed to repair most of the damage done by restoring files from an old backup we have on our server but what I can't find anywhere (and what they've removed) is all the graemlins and the post icons.

Could someone please post links to the standard image files for icons+graemlins and a screenshot of 'select * from w3t_graemlins' as I fear I'm going to have to rebuild these tables manually.

Also I'm not quite sure where the post icons live (I couldn't find them in a table) could someone please let me know where they are.

Many thanks in advance
Rob

Ok I've fixed the post icons its just the graemlins now.

Thanks again for any help you can give
Rob <img src="https://www.ubbcentral.com/boards/images/graemlins/smile.gif" alt="" />

When you reply to this thread, don't you see all the graemlins beneath the edit area?

Download a copy of the latest version, then you'll have em <img src="https://www.ubbcentral.com/boards/images/graemlins/wink.gif" alt="" />

Sorry meant to say I've got all the graemlin .gifs, I was just going to rebuild the w3t_graemlins table manually using SQL commands, thats why I wanted a screenshot of 'select * from w3t_graemlins'. <img src="https://www.ubbcentral.com/boards/images/graemlins/smile.gif" alt="" />

If I download a copy of the forum then I'll have to try and get my own mysql server and things up as I don't have the access on our current server to install a second copy of the forum. <img src="https://www.ubbcentral.com/boards/images/graemlins/frown.gif" alt="" />

If you have a copy of the .zip files look in the createteables.php file, the entire greamlins tables is there, with alll the sql comands. You can just copy/paste them into the sql box i the control panel.

I rebuilt the forum fine using the suggestions above so thanks to everyone that replied.

However, our forum is being taken down almost dayly now by hackers and we havn't a clue how!! There's no way they can brute for crack passwords as quick as were changeing them and were using very strong passwords as well.

Has anyone got any idea how they may be doing this? PM if you like as I know this may be a sensitive subject.

Could there be anything we've missed thats allowing them in or could our forum not be setup correctly? I'm currently spending ages repairing files every time they get in but I'm fighting a loosing battle. <img src="https://www.ubbcentral.com/boards/images/graemlins/frown.gif" alt="" />

Please upgrade from 6.2.3 to 6.5.

Is there an issue with 6.2.3 then?

There are a number of known issues with older versions.