Hacked!

[DonaldDasher]

We've been badly hacked into twice this week and have decided to move over to vBulletin.

We need to access the numerous articles we added via TinyPortal - is is possible to retrieve these from the database tables? Luckily we have a back-up.

[Renegd98]

Sorry to hear you have been hacked so often. To get your data it is available via the database with many programs that are available to let you access and directly read your database tables.  All the tables in your database that have to do with TP are prefixed with TP. I'm not a database guru but I believe the field name is TP_articles.

BTW I se4e your version of SMF from your signature is not the latest and may be why you are being targeted for hacks. The latest version is SMF 1.1.8 and is more secure.

Good luck,...

[DonaldDasher]

We had 1.1.8 installed and was hacked. We are unsure how it was breached but when we reinstalled everything yesterday we were simply hacked again.

Can anybody suggest some software to enable export of the TP articles?

[Zetan]

You might want to change access details to your admin accounts, server access if you haven't already.

[Skhilled]

If you were hacked after upgrading SMF it is possible that SMF is not the problem. It's possible that your pc was hacked and passwords, etc. were harvested. I suggest that you do as Zetan says but also, run anti-virus and anti-spyware programs to see if your pc has any trojans. You'll want to ask anyone else who has access to your pc, your web server, and your web site(s) to do the same.

Ask you hosting to look into this as well. They might be able to help identify where and how they got in.

[IchBin]

You should take a look at the security record of SMF vs vBulletin if you are worried about exploits. Getting hacked is usually done two ways. The most common way is when you are on a shared hosting account. Someone else on the server gets hacked through an exploit in some piece of software, and then they gain access to all the other accounts because of that. The other way is what Skhilled suggested. Your host should be looking into this for sure. They should be able to tell you EXACTLY how it is happening by examining the logs.