Geeklog Forums

Or more precisely, all admin access to the Forum plug-in. The forums are still there, and function just fine...but the admin access from the admin panel has mysteriously vanished, along with any mention of the Forum plug-in in the plug-in admin menu.

I think we may have been hacked. But, where did the access options go if the forums are still there?

Addiitonally, I'm getting a security warning stating that we haven't yet changed the password from the default "password," on one of the accounts. I checked the admin accounts and changed the PWs just to be safe, but still get the security warning. I'm assuming that the warning isn't coming because a regular user level account is still set to the default pass, right? If so, how can it be tracked down with hundreds of users?

If you are using GL 1.3.x then you need to change both Admin and Moderator passwords.

---

GeekLog Hosting, Installations and Upgrades - WWW.AWEHOST.COM - Hosting starts @ only $4.95/mo.

Yep, the block simply checks all accounts on the site, so if you've already changed the Admin and Moderator account passwords, then it's one of your users.

It can be done in the same way the block does it: Check the 'passwd' field of all users for the md5 checksum of the word 'password'.

Btw, before you do that, consider that your user may be thinking that you're spying on them when you tell them what their password is ...

bye, Dirk