Something weird happened... Has our forum been hacked?

Discussion in 'Site & Server Administration' started by grs123, Jun 7, 2007.

  1. #1
    Yesterday night something weird happened...

    went on my forum to find that only the following message was displayed:

    8: Undefined index: lang_locale
    /homepages/10/d107635368/htdocs/Forum/Sources/Subs.php
    868

    the url is http://www.ProJumpForum.co.uk

    do you think we have been hacked or it is something less sinister than that!

    Please can someone point me in the right direction and help me get it sorted

    all advise appreciated

    Thank you in advance.
     
    grs123, Jun 7, 2007 IP
  2. inworx

    inworx Peon

    Messages:
    4,860
    Likes Received:
    201
    Best Answers:
    0
    Trophy Points:
    0
    #2
    Upload the files again and see if it fixes that.
     
    inworx, Jun 7, 2007 IP
  3. p2y

    p2y Well-Known Member

    Messages:
    581
    Likes Received:
    14
    Best Answers:
    0
    Trophy Points:
    123
    #3
    Notice: Undefined offset: 1001 in /homepages/10/d107635368/htdocs/Forum/Sources/Errors.php on line 138
    : INSERT command denied to user 'dbo169867188'@'212.227.109.169' for table 'smf_sessions'
    /homepages/10/d107635368/htdocs/Forum/Sources/Load.php
    2037

    your users access is limited to database.Grant access for all commands or create another database user & update information.
     
    p2y, Jun 7, 2007 IP
  4. inworx

    inworx Peon

    Messages:
    4,860
    Likes Received:
    201
    Best Answers:
    0
    Trophy Points:
    0
    #4
    Yes, probably you must allow all privileges for the use connected to the database.
     
    inworx, Jun 8, 2007 IP
  5. damonp

    damonp Peon

    Messages:
    97
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #5
    Seeing Undefined Index and Notice messages usually mean the error_reporting level of PHP has been set too high. They aren't actually errors, but notices and warnings.

    Has PHP been upgraded on the server lately? Lots of times a host will upgrade PHP and overwrite the existing php.ini with a default one.

    http://www.php.net/manual/en/function.error-reporting.php

    For a production server I would turn off error_reporting entirely until you need it to debug. It gives away too much information for a hacker's eyes.

    To get rid of the notices you could do something like:
    // Report all errors except E_NOTICE
    // This is the default value set in php.ini
    error_reporting(E_ALL ^ E_NOTICE);
    Code (markup):
    or similar in a .htaccess.
     
    damonp, Jun 8, 2007 IP
  6. grs123

    grs123 Member

    Messages:
    86
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    43
    #6
    Thanks for the replys everyone
    much appreciated :)
     
    grs123, Jun 14, 2007 IP