coppermine-gallery.com/forum

Support => cpg1.4.x Support => Older/other versions => cpg1.4 permissions => Topic started by: rakshi on April 15, 2008, 07:02:00 PM

Title: [Solved]: Hacked, fixed.. and now can't log in!
Post by: rakshi on April 15, 2008, 07:02:00 PM
I, too, suffered the hack that is being discussed here... and updated my coppermine galleries to bring them to the latest version. NOW I can't log in! I look in the data base and see my username and password... and see that I am in the Admin group, but the program will NOT accept my username and password.

Could you please tell me how to fix this issue??

Jan Jarrell
Title: Re: Hacked, fixed.. and now can't log in!
Post by: rakshi on April 15, 2008, 07:04:18 PM
P.S. My gallery is at: http://www.sean-astin.net/elijah


Jan Jarrell

Title: Re: Hacked, fixed.. and now can't log in!
Post by: AnnieBarlow on April 15, 2008, 07:38:50 PM
Hi hun

Try reseting your password throught the reset form
Title: Re: Hacked, fixed.. and now can't log in!
Post by: rakshi on April 15, 2008, 07:42:27 PM
Thank you. I tried that. Got the email as expected, clicked on the link, and it takes me to my gallery home page and nothing else.

JJ
Title: Re: Hacked, fixed.. and now can't log in!
Post by: AnnieBarlow on April 15, 2008, 08:55:55 PM
check the url and make sure the file exists

if it does, re-upload the forgot_passwd.php file in the ftp
Title: Re: Hacked, fixed.. and now can't log in!
Post by: soro on April 15, 2008, 10:12:56 PM
You can try reseting your password directly in the DB (not necessarily for the faint at heart, there some posts here in the forum, you may want to read them first). Here (http://forum.coppermine-gallery.net/index.php/topic,44686.0.html) are instructions by one of the pros, or I have also had success by md5 encrypting my desired password with one of the tools you may have on your computer or find on the internet, and pasting the encrypted string into the respective database field...

But then, perhaps the problem is not the password. You could try to do a "repair" on all the cpg database tables. Sometimes helps.
Title: Re: Hacked, fixed.. and now can't log in!
Post by: Joachim Müller on April 16, 2008, 07:28:09 AM
Only perform a repair if a table is marked as "crashed".
Title: Re: Hacked, fixed.. and now can't log in!
Post by: rakshi on April 17, 2008, 07:44:38 PM
Quote from: soro on April 15, 2008, 10:12:56 PM
You can try reseting your password directly in the DB (not necessarily for the faint at heart, there some posts here in the forum, you may want to read them first). Here (http://forum.coppermine-gallery.net/index.php/topic,44686.0.html) are instructions by one of the pros, or I have also had success by md5 encrypting my desired password with one of the tools you may have on your computer or find on the internet, and pasting the encrypted string into the respective database field...

But then, perhaps the problem is not the password. You could try to do a "repair" on all the cpg database tables. Sometimes helps.

I guess I'm not faint of heart because I've gone into myphpadmin and changed my password there... and it didn't help. I still can't log in.

I'm starting to get quite upset. I could log in fine before I did the upgrade and I followed instructions very precicely. *sigh*

None of the tables are marked as 'crashed' which means, I guess, that I shouldn't do the 'repair'?

Thank you for your suggestion..
Title: Re: Hacked, fixed.. and now can't log in!
Post by: rakshi on April 17, 2008, 07:45:01 PM
Quote from: Joachim Müller on April 16, 2008, 07:28:09 AM
Only perform a repair if a table is marked as "crashed".

None of the tables are marked as 'crashed' which means, I guess, that I shouldn't do the 'repair'?

Thank you..
Title: Re: Hacked, fixed.. and now can't log in!
Post by: rakshi on April 17, 2008, 07:51:39 PM
Quote from: AnnieBarlow on April 15, 2008, 08:55:55 PM
check the url and make sure the file exists

if it does, re-upload the forgot_passwd.php file in the ftp

It did exist so I re-uploaded it. Same problem. STill can't log in.

*sigh*

thank you though
Title: Re: Hacked, fixed.. and now can't log in!
Post by: Nibbler on April 17, 2008, 07:56:25 PM
Was the password in plain text in the database?

If so, check that the setting 'enable_encrypted_passwords' is set to 0 in the config table. The opposite applies too.
Title: Re: Hacked, fixed.. and now can't log in!
Post by: rakshi on April 17, 2008, 08:09:50 PM
Quote from: Nibbler on April 17, 2008, 07:56:25 PM
Was the password in plain text in the database?

If so, check that the setting 'enable_encrypted_passwords' is set to 0 in the config table. The opposite applies too.

checking.....

THAT DID IT!!

Thank you for your help and for your patience.

JJ