version

[amberracing]

How do I find out what version of coppermine I have on my server. For some reason the pics are not loading and I have been told that I need to upload updates. I don't know which updates to upload.

[Nibbler]

The documentation has the version number, as does the version check tool, as does the configuration page and the HTML output of the gallery. If none of those help you post a link.

[amberracing]

the website I am posting about is www.amberracing.com click on photos link and you will see the problem.

[amberracing]

also I have clicked on the "forgot password" link on the login of the gallery and it says that it has sent my password but it never sends anything.

[onthepike]

You appear to be running CPG version 1.4.14 and are behind in updates. But you have additional problems, I see:

http://amberracing.com/coppermine/index.php

Your pictures do not display.

[Nibbler]

You are using 1.4.14 and you were hacked due to not keeping up to date. That's why all your images are not being displayed.

See http://forum.coppermine-gallery.net/index.php/topic,51927.0.html for how to clean up your gallery. If you forgot your admin password then search the forum for instructions on how to retrieve it.

[amberracing]

where do I get the updates for that verion and how do I get the pics to show again? They worked for over a year.

[Nibbler]

Read the thread I posted.

[amberracing]

I tried the reteaval and it does not send me the password

[Nibbler]

Please stop posting until you have done as suggested. Read the thread and search the forums.

[onthepike]

It may or may not have been hacked. Multiple scanners don't prove any malicious code, but that's not definitive in any way. It could have been hacked nonetheless.

However, I did notice a 301 redirect to google.com which may either be a hack or an error in the .htaccess file. There are plenty of "htaccess cheat sheets" out there and perhaps this is a case of good intentions gone wrong :-)

I would surely update, no question. However, I'd also refer to any .htaccess file to verify the redirect and correct there first.

[amberracing]

but I cannot put the gallery in maintenance mode because I cannot log into the gallery as admin

[amberracing]

onthepike.......can you talk by phone?

[phill104]

onthepike,

I know you are trying to help but Nibbler's answer stands. The site has been hacked and needs to be sanitised as per the thread Nibbler mentioned. Until everthing in that thread is done there is no point discussing this further. Simply upgrading will not sanitize the affected site.

[Joachim Müller]

It may or may not have been hacked. Multiple scanners don't prove any malicious code, but that's not definitive in any way. It could have been hacked nonetheless.

Don't trust scanners: we know the payload of the hacks that exist in the wild, and this is one of them. The site in question has been hacked for sure. Trust Nibbler's experience, he's been around for quite a while.