Status
Not open for further replies.

Divvy

Active Member
806
2009
18
0
Hello guys,

My phpBB was hacked by TimThumb.
Im using 3.0.2 and now I will update my version today.

But before doing that, I want to enter in my ACP, because I cant enter anymore as admin, appears this error:
Access to the Administration Control Panel is not allowed as you do not have administrative permissions.


I tried to run this command to add a new admin user, but same message appear to new admin user:
http://www.phpbb.com/community/****...id=808cfe43692f8a6e8a4b55d4c6c0bf2c#p11536485

I also installed Support Toolkit but appears this error when I access to http://www.mydomain.com/stk/

This is my common.php file code:
http://paste2.org/p/2028741

Please help...

Thanks
 
9 comments
I don't really know phpbb but what I can suggest you is go to your database and see which user is in the admin group and do a password reset (delete table contents, add new password - md5).
 
phpbb3 is one of the top forum boards you can get but you MUST always stay up to date with the new versions, good luck with fixing things.
and i would do what Qoo said
 
Yes, do what Qoo said, go to yourdomain.com/phpmyadmin , log in, find your username and change password / permissions.

Good luck.
 
Hello guys, thank you for your help!

I did what Qoo said but didnt worked...
I also did this:

In phpmyadmin, run the following, which will create an admin user named admin1 with a password of admin. From that point you should be able to get into the ACP. Change your table prefix if it is not phpbb_.

INSERT INTO phpbb_users (user_type, group_id, username, username_clean, user_regdate, user_password, user_email, user_lang, user_style, user_rank, user_colour, user_posts, user_permissions, user_ip, user_birthday, user_lastpage, user_last_confirm_key, user_post_sortby_type, user_post_sortby_dir, user_topic_sortby_type, user_topic_sortby_dir, user_avatar, user_sig, user_sig_bbcode_uid, user_from, user_icq, user_aim, user_yim, user_msnm, user_jabber, user_website, user_occ, user_interests, user_actkey, user_newpasswd) VALUES (3, 5, 'Admin1', 'admin1', 0, '21232f297a57a5a743894a0e4a801fc3', 'admin@yourdomain.com', 'en', 1, 1, 'AA0000', 1, '', '', '', '', '', 't', 'a', 't', 'd', '', '', '', '', '', '', '', '', '', '', '', '', '', '');

And also didnt worked...

Can someone help me fix this error when I try to run Support Toolkit ?
http://i.imgur.com/K5rJC.png

Thanks!
 
Add in error_reporting(0) to the top of the file for the support toolkit. that will supress the error message and allow headers.
 
Pm me the cpanel details and i will sort it for you.

I would guess the domain path for the cookie is set wrong or has been changed so you cant login.


I will upgrade to latest phpbb version aswell for you, but you will need to re-add your mods.
 
phpBB is very secure and it's your fault for getting hacked. Always make sure to stay up to date - You're 10 subversions behind! Anyway, I'd suggest that you install a vanilla phpBB on your localhost and generate a new password. Copy the password hash and go to your online forum's phpmyadmin and replace the password with the new hash. phpBB's md5 hashing works differently from the normal md5 function in PHP, so that's why you need to get a hashed password from phpBB itself.

Once you get everything under control, please make sure to update to the latest version.
 
Status
Not open for further replies.
Back
Top