Page 1 of 1

WebSite hacked?

Posted: Mon Nov 26, 2012 11:31 pm
by Wizard
I now get this when I try to access my site. Any clues?
Query failed:
SELECT


e.id,
e.title,
e.timestamp,
e.comments,
e.exflag,
e.authorid,
e.trackbacks,
e.isdraft,
e.allow_comments,
e.last_modified,

a.realname AS author,
a.username AS loginname,
a.email
, e.body, e.extended

FROM
serendipity_entries AS e
LEFT JOIN serendipity_authors a
ON e.authorid = a.authorid
LEFT JOIN serendipity_entrycat ec
ON e.id = ec.entryid
LEFT JOIN serendipity_category c
ON ec.categoryid = c.categoryid
LEFT JOIN serendipity_authorgroups AS acl_a
ON acl_a.authorid = 0
LEFT JOIN serendipity_access AS acl_acc
ON ( acl_acc.artifact_mode = 'read'
AND acl_acc.artifact_type = 'category'
AND acl_acc.artifact_id = c.categoryid
)
WHERE isdraft = 'false' AND e.timestamp <= 1353972300 AND (
c.categoryid IS NULL
OR ( acl_acc.groupid = 0)
OR ( acl_acc.artifact_id IS NULL

)
)
GROUP BY e.id

ORDER BY timestamp DESC
LIMIT 15
/ No Database Selected

Re: WebSite hacked?

Posted: Tue Nov 27, 2012 8:57 am
by garvinhicking
Hi!

Check if your database still exists and the database name as referenced in serendipity_config_local.inc.php still exists. Also check if your database user/password credentials are still valid. Currently s9y can connect to your database server, but not connect to the database itself.

Regards,
Garvin

Re: WebSite hacked?

Posted: Tue Nov 27, 2012 5:15 pm
by Wizard
Well, you're right. It seems that my database has been deleted. Not by me, but by someone who hacked into my site, read the config file that you mentioned and deleted the database without any event log being written to. I'm, not sure what I can do, other than starting over. The database, along with my web hosting site is hosted by GoDaddy. They are unable to see if any thing was deleted normally, so my conclusion is that is was "hacked" out. My other databases for other Serendipity sites that I have were unaffected. I haven't been on that site for a few months so I didn't notice that it was gone. GoDaddy only maintains database backups for one month. Word to the wise, back up your database and store somewhere you maintain.

Re: WebSite hacked?

Posted: Fri May 24, 2013 7:38 pm
by zaza
garvinhicking wrote:Hi!

Check if your database still exists and the database name as referenced in serendipity_config_local.inc.php still exists. Also check if your database user/password credentials are still valid. Currently s9y can connect to your database server, but not connect to the database itself.

Regards,
Garvin
Just discovered this thread/boards on google after experiencing same symptoms mentioned earlier ... and indeed the problem was the database name in serendipity_config_local.inc.php! Thanks garvin!