[Solved]: My gallery has been hacked - what now? [Solved]: My gallery has been hacked - what now?
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

[Solved]: My gallery has been hacked - what now?

Started by photo-mariages, April 14, 2008, 12:52:04 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

photo-mariages

Hello,

My gallery www.photo06.fr has been hacked. When accessing this URL the only message you get is:
"Fatal Error :"

I really don't know where to start. I access my server via FTP and the files seem to be there - well at least the index.php on the root is there and so are my album files.
I had nothing else on this site than a coppermine gallery...

Where should I start?

thanks!

http://www.photo06.fr

Hein Traag

Which version were you using ? If this was not 1.4.17 then upgrade following the instructions in the documentation.

Pascal YAP

If you want to explain more easily your problem, go to our French Board here :
http://coppermine-gallery.net/forum/index.php?board=38.0

PYAP

Hein Traag


Joachim Müller

Your site has NOT been hacked, at least you can't conclude that from the error message. The fatal error you get is not a sign of having been hacked. It's a sign that something is wrong, that's all. Enable debug_mode to see the actual error message (after having upgraded, as you now have cpg1.4.13, while the most recent stable release currently is cpg1.4.18). If you still have the fatal error after having performed the update, do as suggested in http://coppermine-gallery.net/tutorial/debug_mode.php

photo-mariages

Hi,

It took me a few days to figure out how to set up phpmyadmin but finally got it working to set up the debug mode.

When I now type www.photo06.fr (root of the coppermine gallery) I get the following explanation after Fatal Error:

----
While executing query "delete from `U7575134`.cpg14x_sessions where time<1208585577 and remember=0;" on Resource id #6

mySQL error: Can't open file: 'cpg14x_sessions.MYI'. (errno: 145)
----

It makes no sense to me at all and unfortunately does not help me to fix my problem. Any idea of what my next step should be?

thanks...

photo-mariages

Hi,

When I go in phpmyadmin to the table cpg14x_sessions I get the following information:

----
Error

SQL query: Edit

SHOW INDEX FROM `cpg14x_sessions` ;

MySQL said: Documentation
#1016 - Can't open file: 'cpg14x_sessions.MYI'. (errno: 145)
----

Am I missing a table?

Abbas Ali

Chief Geek at Ranium Systems

photo-mariages

Dear Abbas Ali,

Thank you for the analysis and the link. It now finally works!

I don't understand what happened - or why this happened, but am happy to have it fixed :)

www.photo06.fr