Just got Hacked

[Polymath]

Heres the French one. I think thats Del1

http://www.google.fr/search?q=TinyPortal+v0.8.6+%C2%A9+Bloc&hl=fr&lr=&start=40&sa=N

[Skhilled]

The !@#$% tried it on smfarcade's shoutbox yesterday!

[Mr. Ksoft]

I'm not in that topsite and I was just hacked this morning by some MKexpert guy.

Interesting, I hadn't applied the patch because it said it was about guest shouts, which I've had off.  But I'll do it now.

BTW, I have found another way to de-hack a board.  Go to your admin panel's shoutbox settings (www.yoursitehere.com/index.php?action=tpadmin;sa=shoutbox) and delete the offending post.  Simple!

EDIT: I also noticed that after deleteing the effected post, there's another, posted by "admin", that says "zzzz".  What the heck is that?  I checked my memberlist; there's not a soul named it.

[deniz]

when i click fallowing link its linked me different place ??

http://sitename.com/forum/index.php?action=tpadmin;sa=submission

[basis]

i too just got hacked.

question, how did you guys get your site back? i have not logged into the site's cpanel or ftp to correct anything - thinking that the host might want to do some 'digging' or tracing.

or should i not bother about it and just go ahead to rectify the site? (so back to original question, how to rectify)

thanks.

edit: nevermind, saw the other tinyportal forum post on the hacking.

[agridoc]

Don' t touch any file, it usually is a simple redirect hack.

Assuming you are using TP 0.8.6 go to http://www.tinyportal.net/smf/index.php?topic=4440.0 and apply the patch.

You should see the forum again and the hacking message in Shoutbox.

[basis]

thanks agridoc.

this may sound silly, but how do i update the patch (which I think I did back in april), when i can't even access the forum?

is there another way via FTP? (i am technical enuf to know FTP, etc. but not savvy enuf to know what to do when hacked)

[BobbyKashyap]

they are trying non-stop to hack... i got hacked twice again.

[agridoc]

basis, the message for security update describes where to FTP themÃ, 

Attached are 2 updated files that will prevent this from happening. They will also restore a TP site that is currently being redirected because of the exploit.

Installation:
Upload the files through ftp to your Sources folder and overwrite current.

BobbyKashyap did you apply the security patch?http://www.tinyportal.net/smf/index.php?topic=4440.0

[BobbyKashyap]

hi agridoc.. yep that patch u mentioned is there from quite some... but still they were able to hack in!