S9Y hacked or bug?

Random stuff about serendipity. Discussion, Questions, Paraphernalia.
Post Reply
Jr Prod
Regular
Posts: 18
Joined: Thu Jul 14, 2005 12:18 pm

S9Y hacked or bug?

Post by Jr Prod » Sat Jun 19, 2010 12:13 am

Hi everybody,

18 months ago I launched a site for my wedding: www.fosenbauer.com/wedding.

Now, it seems that there has been a bug or that my site has been hacked. When trying to access to the site I get the following error messages:
Warning: mysql_connect() [function.mysql-connect]: Access denied for user 'pavel'@'localhost' (using password: YES) in /home/www/aea301d5506c2c5e649dd1355205161e/web/wedding/include/db/mysql.inc.php on line 270

Warning: mysql_select_db() [function.mysql-select-db]: Access denied for user 'httpd'@'localhost' (using password: NO) in /home/www/aea301d5506c2c5e649dd1355205161e/web/wedding/include/db/mysql.inc.php on line 271

Warning: mysql_select_db() [function.mysql-select-db]: A link to the server could not be established in /home/www/aea301d5506c2c5e649dd1355205161e/web/wedding/include/db/mysql.inc.php on line 271

Warning: mysql_query(): supplied argument is not a valid MySQL-Link resource in /home/www/aea301d5506c2c5e649dd1355205161e/web/wedding/include/db/mysql.inc.php on line 281

Warning: mysql_query(): supplied argument is not a valid MySQL-Link resource in /home/www/aea301d5506c2c5e649dd1355205161e/web/wedding/include/db/mysql.inc.php on line 281
serendipity error: unable to connect to database - exiting.


My webhosting provider told me that they didn't change anything on their side.

My questions are:
1) do you think it possible to repare the installation?

2) if not, is it possible to copy the files from the previous site and create a new page? I have access to the files via FTP and also to the database, but do not know how to copy the original content and which files / data to copy.
On the site were a lot of "static pages". I couldn't find any folder containing this kind of files...


Many thanks for your help,
Best regards,

User avatar
garvinhicking
Core Developer
Posts: 30020
Joined: Tue Sep 16, 2003 9:45 pm
Location: Cologne, Germany
Contact:

Re: S9Y hacked or bug?

Post by garvinhicking » Sat Jun 19, 2010 4:15 pm

Hi!

This does not necessarily mean something's gotten hacked. The mysql database accesss credentials inside serendipity_config_local.inc.php no longer match the server. Ask your provider if the server or the credentials might have changed, or try to remember if you recently changed any passwords.

Regards,
Garvin
# Garvin Hicking (s9y Developer)
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/

Jr Prod
Regular
Posts: 18
Joined: Thu Jul 14, 2005 12:18 pm

Re: S9Y hacked or bug?

Post by Jr Prod » Sat Jun 19, 2010 7:33 pm

Hi Garvin,

Thanks for your quick reply.
I remember the password of my database. Is there a way to edit the "serendipity_config_local.inc.php" file and try to update it with the current username and password of the database ?

Second question: Where can I find this file? In the root directory I see the "serendipity_config.inc" but not "serendipity_config_local.inc.php". Is it this one you meant?

Finally, where can I find the information that was displayed on the blog (the different posts, links, etc)? Is there a way to copy the database or some files and plug it into a new database / folder where a working version of S9Y is installed (just in case the first option - updating the password and username - wouldn't work)?

Thanks!
P

garvinhicking wrote:Hi!

This does not necessarily mean something's gotten hacked. The mysql database accesss credentials inside serendipity_config_local.inc.php no longer match the server. Ask your provider if the server or the credentials might have changed, or try to remember if you recently changed any passwords.

Regards,
Garvin

User avatar
garvinhicking
Core Developer
Posts: 30020
Joined: Tue Sep 16, 2003 9:45 pm
Location: Cologne, Germany
Contact:

Re: S9Y hacked or bug?

Post by garvinhicking » Sun Jun 20, 2010 1:37 pm

Hi!

Yes, you can edit taht file. If youre missing privielges, check out the FAQ on s9y.org for "fixperm.php" to regain privileges.

The file must be there; serendipity_config.inc.php is another file.

Finally, where can I find the information that was displayed on the blog (the different posts, links, etc)? Is there a way to copy the database or some files and plug it into a new database / folder where a working version of S9Y is installed (just in case the first option - updating the password and username - wouldn't work)?


Those are in the database, you can use phpMyAdmin to access those. You can copy over the database to another installation, but you must adapt some paths, configuration etc. in serendipity_config, serendipipty_plugins and copy over files like /templates /plugins /uploads ...

Regard,s
Garvin
# Garvin Hicking (s9y Developer)
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/

Jr Prod
Regular
Posts: 18
Joined: Thu Jul 14, 2005 12:18 pm

Re: S9Y hacked or bug?

Post by Jr Prod » Thu Jul 08, 2010 8:32 pm

Thanks Garvin! I could copy the content to the brand new version of s9y.

Many thanks for your support,
Kind regards,
Jr Prod

Post Reply