WebSite hacked?

Found a bug? Tell us!!
Post Reply
Wizard
Regular
Posts: 103
Joined: Sat Aug 13, 2005 7:18 am
Location: Southern California
Contact:

WebSite hacked?

Post by Wizard »

I now get this when I try to access my site. Any clues?
Query failed:
SELECT


e.id,
e.title,
e.timestamp,
e.comments,
e.exflag,
e.authorid,
e.trackbacks,
e.isdraft,
e.allow_comments,
e.last_modified,

a.realname AS author,
a.username AS loginname,
a.email
, e.body, e.extended

FROM
serendipity_entries AS e
LEFT JOIN serendipity_authors a
ON e.authorid = a.authorid
LEFT JOIN serendipity_entrycat ec
ON e.id = ec.entryid
LEFT JOIN serendipity_category c
ON ec.categoryid = c.categoryid
LEFT JOIN serendipity_authorgroups AS acl_a
ON acl_a.authorid = 0
LEFT JOIN serendipity_access AS acl_acc
ON ( acl_acc.artifact_mode = 'read'
AND acl_acc.artifact_type = 'category'
AND acl_acc.artifact_id = c.categoryid
)
WHERE isdraft = 'false' AND e.timestamp <= 1353972300 AND (
c.categoryid IS NULL
OR ( acl_acc.groupid = 0)
OR ( acl_acc.artifact_id IS NULL

)
)
GROUP BY e.id

ORDER BY timestamp DESC
LIMIT 15
/ No Database Selected
Wizard
My WeBlog
garvinhicking
Core Developer
Posts: 30022
Joined: Tue Sep 16, 2003 9:45 pm
Location: Cologne, Germany
Contact:

Re: WebSite hacked?

Post by garvinhicking »

Hi!

Check if your database still exists and the database name as referenced in serendipity_config_local.inc.php still exists. Also check if your database user/password credentials are still valid. Currently s9y can connect to your database server, but not connect to the database itself.

Regards,
Garvin
# Garvin Hicking (s9y Developer)
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/
Wizard
Regular
Posts: 103
Joined: Sat Aug 13, 2005 7:18 am
Location: Southern California
Contact:

Re: WebSite hacked?

Post by Wizard »

Well, you're right. It seems that my database has been deleted. Not by me, but by someone who hacked into my site, read the config file that you mentioned and deleted the database without any event log being written to. I'm, not sure what I can do, other than starting over. The database, along with my web hosting site is hosted by GoDaddy. They are unable to see if any thing was deleted normally, so my conclusion is that is was "hacked" out. My other databases for other Serendipity sites that I have were unaffected. I haven't been on that site for a few months so I didn't notice that it was gone. GoDaddy only maintains database backups for one month. Word to the wise, back up your database and store somewhere you maintain.
Wizard
My WeBlog
zaza
Posts: 2
Joined: Fri May 24, 2013 7:27 pm

Re: WebSite hacked?

Post by zaza »

garvinhicking wrote:Hi!

Check if your database still exists and the database name as referenced in serendipity_config_local.inc.php still exists. Also check if your database user/password credentials are still valid. Currently s9y can connect to your database server, but not connect to the database itself.

Regards,
Garvin
Just discovered this thread/boards on google after experiencing same symptoms mentioned earlier ... and indeed the problem was the database name in serendipity_config_local.inc.php! Thanks garvin!
Post Reply