Site hacked, files deleted, restoring help Site hacked, files deleted, restoring help
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Site hacked, files deleted, restoring help

Started by StephBertha, April 01, 2012, 03:46:34 AM

Previous topic - Next topic

0 Members and 2 Guests are viewing this topic.

StephBertha

Hi there,

Here's what happened:

1. My site was hacked.
2. The files were deleted by the hacker.
3. I have the files and the database backed up.
4. Now, I'm trying to put the pieces back together.

So, the database dump is already in place before the site is officially 're-installed'.  I can go to install.php on my site and set everything up, but do I keep the database information the same or rename the tables?

Thank you,
Stephanie


lucky-luc

I think both ways will give you the same result, creating a new database and change info in the config file is longer.

Joe Carver

Quote from: StephBertha on April 01, 2012, 03:46:34 AM
....but do I keep the database information the same or rename the tables?

Keep everything the same if you have clean back up copies. The file include/config.inc.php will need to be edited if you change the name and / or password for the db.
(which might be a good idea if the hacker gained access to your credential information).

You will not want or need to run install.php, only update.php.

Make sure to upgrade your cpg after restoring it.


StephBertha

Hi Joe,

Bah. So I didn't see your message until now.  I had installed and then updated. I managed to get the data from the database into Coppermine and I upgraded the version to the latest.

However, some images are showing up and some are not.  I checked in my FTP and all the image thumbnails, intermediate, and normal images are in there.  Is there anything else I can do instead of rebatching all the files?

Αndré

Please post a link to your gallery and some links where the image won't show as expected.

StephBertha

Sure!  My URL is: http://www.kerrsmith.ws/gallery/ If you look at the home page or any other page in the gallery, you'll notice the thumbnails not showing up. 

Αndré

You can use the admin tools to re-create your thumbnails. Unfortunately you haven't posted a test user account, so I could not investigate the issue any further. If the admin tools don't fix your issue, please either post a test user account (no admin account!) or temporary enable guests to view intermediate-sized and full-sized pictures.

StephBertha

Oh gosh I'm sorry!  I had NO idea guests couldn't view the larger images. I would never set that up in my gallery, must be the default settings.  Anyway, I changed them.

Would you like me to create a user account?  If so, how do I go about doing that?

Αndré



Αndré

Would you be so kind to tell us which options you used and what exactly Coppermine told you (error messages, etc.)? ::)

StephBertha

Sure!

Please see the attached screenshots. I get some images that say "updated successfully" and then some say that say "error".  :(

Αndré

It seems that the whole "premieres" directory is missing on your server, as I get an 404 error page: http://kerrsmith.ws/gallery/albums/premieres/

Without that directory (and all subsequent directories/files) Coppermine cannot create thumbnail images, as there are no source images.

StephBertha

It may seem like there's no images in that directory, but there are. I'm in my FTP and I'm looking at all the source files.

The only thing I can think of is to remove the entire gallery and rebatch all the images, which would suck, but defeats the purpose of what I have tried to do here.

Would you, kindly explain to me the best thing I can do for future references?  If I make sure I backup my database, backup all my images with thumbnails and normal images, I should be OK right? Cause that's what I did here and it seems like it's not OK.


Αndré

The HTTP error page means that the file or directory doesn't exist. We had one user in the past dealing with the same issue that all files are present at his FTP server but the gallery didn't show up any picture. The reason was, that his hosting provider switch the server but didn't assigned his FTP account to the new server.

To check if your FTP account matches your current gallery HTTP server try to upload a new file somewhere to your server (e.g. to the root directory) and check if it shows up when you visit it with your browser. Alternatively, delete some unimportant file (e.g. http://kerrsmith.ws/gallery/CHANGELOG.txt) and check if it still shows up when you visit it with your browser (don't forget to clear your cache).

Regarding the backup question read http://documentation.coppermine-gallery.net/en/export.htm#backup