UBB.threads PHP Forum Software Community Forums UBB.classic UBB.classic 6 Support Restoring hacked member

Two of my moderators have had their accounts hacked. They can't log-in, profile information has been changed and their number of posts reads 0.

However, one is the most prolific poster on the forum and the number of posts in the Directory reads the correct amount, 15793, so obviously there is some record of what he's done.

When his name is clicked, and then 'View recent posts' the error message "Member profile corrupt (blank): '1201'" appears.

My moderators are understandably and want their posts back. Is this possible and if so, how?

Thank you.

The easiest thing to do would be to restore the profile back from a backup of your UBB. If you cannot get them back, they can always reregister, and you could manually edit their post count (not supported by Groupee).

Thanks Ron, I take it that rebuilding and reindexing the site wont do any good if their posts have somehow been deleted by the hacker?

If their posts have been deleted, you would have to restore from a backup. Rebuilding the metadata only reads the data that's out there and builds the necessary metadata files for the board to read. Reindexing just updates the search indexes.

Try to use the search tools and see if there posts are still there.

You should also make sure that you update to the latest 6.7.x version so that you are protected against exploits.

Actually the posts are still there. They can be found using a search for text contained within them and they appear in the threads they were posted to. However, they can't be found when clicking on the user name and then 'View Recent Posts', plus the user profile has a blank space where the publicly displayed name should be and the number of posts reads 0.

In addition, searching by Member Number Or Publicly Displayed Name brings up no results, searching within Member Management on the control panel for the Public Name or User Name brings up no results and if I list all the members the list excludes member 1201 (i.e. the list goes 1200 then 1202) and the other missing member.

I rebuilt and reindexed the site earlier today and now the handle 'unregistered' appears below their names.

Any idea what's going on here or how it can be fixed? Unfortunately no backups of the forums are available.

Thank you.

BTW - this link http://tinyurl.com/gxtxl shows the member (Dave H) and his first post, it also has him correctly listed as moderator and records his total number of posts.

However, this link http://tinyurl.com/jo22j, which is the ninth page of the same thread, has him listed as 'unregistered' and with no posts.

For Dave you'd need to manually create a member profile for him, using something like the following info:

Username
Password
email@address
homepage
Write&forum,number,moderated (put actual moderated forum numbers there)
blank
location
post count

+++++++++++++++++++++++++

save it as 00001201.cgi and upload

once you've done that you'll need to manually edit the emailfile.cgi with his email address and the memberslist.cgi file with his login name and user number (check your files for the should-be-obvious format) - please put them on the correct line within the files.

THEN you can rebuild your topics/forums/delete cache.

Hi Allen,

that worked! Thank you. And thank you Ron, your help is much appreciated.

Dave