Upgrade blank screen 1.4.10 to 1.4.19 Upgrade blank screen 1.4.10 to 1.4.19
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Upgrade blank screen 1.4.10 to 1.4.19

Started by harnser, November 29, 2008, 06:58:35 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

harnser

OK so i had my site compromised by hackers and in trying to clean out their code I started the upgrade from 1.4.10 to 1.4.19
Followed instructions to use the old ablum directory, include/config.inc.php and anycontent.php.
Uploaded using dreamweaver and ran update.php. No messages - just a blank screen. Same for any other php
Read through the forum for past posts and so.....
So cleared cache and cookies and tried again.
Uploaded using smartftp in case dreamweaver was like frontpage and fails to upload sometimes.
Still getting a blank screen.

www.harnserphoto.com/gallery/
I was using a custom theme.
I'm hosted on globat

I will try uploading the old version and see if i can get that to work.
I'd appreciate any suggestions you could give for troubleshooting the problem

Fabricio Ferrero

QuoteOK so i had my site compromised by hackers and in trying to clean out their code I started the upgrade from 1.4.10 to 1.4.19
Sadly you was wrong. Go to: Yikes, I've been hacked! Now what? ;)
Read Docs and Search the Forum before posting. - Soporte en español
--*--
Fabricio Ferrero's Website

Catching up! :)

harnser

Thanks - I'll try this approach. I'd been through the site several times based on time stamps deleting or replacing bad files.
Globat tell us that they've improved their security as I was one of many who had this issue.

Fabricio Ferrero

#3
You're welcome,

Don't trust in your hosting company. You just have to keep up to date your coppermine manually and you will be almost 100% safe. Version 1.4.10 it's too old. Every 4 or 6 month a new version comes up. Check the download section (or this forum) frequently and you will be safe. ;)

Regards,
Read Docs and Search the Forum before posting. - Soporte en español
--*--
Fabricio Ferrero's Website

Catching up! :)

harnser

Thanks - Step 1 done.
Now I have to fix the theme which will be a challenge I can't see anything in admin - it's all black.
Thanks again.

Fabricio Ferrero

My antivirus keeps warning about your web. Please, be sure you have sanitized your web before go ahead.
Read Docs and Search the Forum before posting. - Soporte en español
--*--
Fabricio Ferrero's Website

Catching up! :)

harnser


harnser

If you could help here - is the AV based off the same warning as Google? If so it will still trigger until Google rescans  tonight or tomorrow night. MY work AV is not triggering in Coppermine as it was earlier. So as far I can see currently it should be clean, but I would like to confirm that Thanks

Joachim Müller

The google warning will remain for some days, even if you have sanitized your site. The last time google performed a scan of your website (2008-11-29, i.e. just one day ago) your website was still infected. Don't trust local anti virus scanners, they're usually not very good on determining infested websites. Google provides much better results with their attempt to warn about potentially dangerous sites. This being said: if they still warn about your page, chances are high that your site is still infected and that you haven't thoroughly sanitized your site.
Upgrading alone won't sanitize your page once it was hacked and infected. Read the "Yikes"-thread that Fabricio refered to and do exactly as suggested there.

harnser

Everything is clear on the google scan so the last sanitizing I needed was the coppermine install.
Thanks

Fabricio Ferrero

Congratulations! :) Try to uptade Coppermine as soon as a new versions comes up.  ;)

Regards,
Read Docs and Search the Forum before posting. - Soporte en español
--*--
Fabricio Ferrero's Website

Catching up! :)

harnser