[Solved]: Hacked, fixed.. and now can't log in! [Solved]: Hacked, fixed.. and now can't log in!
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

[Solved]: Hacked, fixed.. and now can't log in!

Started by rakshi, April 15, 2008, 07:02:00 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

rakshi

I, too, suffered the hack that is being discussed here... and updated my coppermine galleries to bring them to the latest version. NOW I can't log in! I look in the data base and see my username and password... and see that I am in the Admin group, but the program will NOT accept my username and password.

Could you please tell me how to fix this issue??

Jan Jarrell

rakshi


AnnieBarlow

Hi hun

Try reseting your password throught the reset form

rakshi

Thank you. I tried that. Got the email as expected, clicked on the link, and it takes me to my gallery home page and nothing else.

JJ

AnnieBarlow

check the url and make sure the file exists

if it does, re-upload the forgot_passwd.php file in the ftp

soro

You can try reseting your password directly in the DB (not necessarily for the faint at heart, there some posts here in the forum, you may want to read them first). Here are instructions by one of the pros, or I have also had success by md5 encrypting my desired password with one of the tools you may have on your computer or find on the internet, and pasting the encrypted string into the respective database field...

But then, perhaps the problem is not the password. You could try to do a "repair" on all the cpg database tables. Sometimes helps.

Joachim Müller

Only perform a repair if a table is marked as "crashed".

rakshi

Quote from: soro on April 15, 2008, 10:12:56 PM
You can try reseting your password directly in the DB (not necessarily for the faint at heart, there some posts here in the forum, you may want to read them first). Here are instructions by one of the pros, or I have also had success by md5 encrypting my desired password with one of the tools you may have on your computer or find on the internet, and pasting the encrypted string into the respective database field...

But then, perhaps the problem is not the password. You could try to do a "repair" on all the cpg database tables. Sometimes helps.

I guess I'm not faint of heart because I've gone into myphpadmin and changed my password there... and it didn't help. I still can't log in.

I'm starting to get quite upset. I could log in fine before I did the upgrade and I followed instructions very precicely. *sigh*

None of the tables are marked as 'crashed' which means, I guess, that I shouldn't do the 'repair'?

Thank you for your suggestion..

rakshi

Quote from: Joachim Müller on April 16, 2008, 07:28:09 AM
Only perform a repair if a table is marked as "crashed".

None of the tables are marked as 'crashed' which means, I guess, that I shouldn't do the 'repair'?

Thank you..

rakshi

Quote from: AnnieBarlow on April 15, 2008, 08:55:55 PM
check the url and make sure the file exists

if it does, re-upload the forgot_passwd.php file in the ftp

It did exist so I re-uploaded it. Same problem. STill can't log in.

*sigh*

thank you though

Nibbler

Was the password in plain text in the database?

If so, check that the setting 'enable_encrypted_passwords' is set to 0 in the config table. The opposite applies too.

rakshi

Quote from: Nibbler on April 17, 2008, 07:56:25 PM
Was the password in plain text in the database?

If so, check that the setting 'enable_encrypted_passwords' is set to 0 in the config table. The opposite applies too.

checking.....

THAT DID IT!!

Thank you for your help and for your patience.

JJ