PDA

View Full Version : v 1.3: about+links page disappeared (I got hacked)


helios
12-08-2005, 07:51 AM
My about+links page link is now loading a blank page, and I wonder if someone can help me get it working again.

I recently discovered that my version 1.3 installation of pixelpost got hacked; basically someone found an exploit in v 1.3 that they used to insert some PHP files into my images and thumbnails folders. These scripts were apparently inserted to create links to a rotating array of doorway pages, and in the process they screwed up my photoblog.

I've removed these files, but still can't get the "about+links" link to load that page. The about_template.html file is still there in the templates directory, so it should load, but apparently something's wrong with the link itself. Here's the code for the link from the image_template.html file:

<a href="index.php?x=about" title="about Steve, and some links">about
+ links</a>

Is this correct?

I don't know enough about PHP to understand how the link functions or to diagnose the problem. It seems that the scripts somehow rewrote some of my pixelpost files. The photoblog's index page was not loading (just got a blank page). I replaced the index.php file from a backup that I (luckily) had on hand, and the index.php page now loads properly (as well as the archives page), but not so for the about+links page. Just a blank page.

Any help is much appreciated. (Yes, I plan to upgrade to version 1.4.3, but want to get this resolved first.)

thanx,

steve

PS: I can provide the offending PHP files if anyone's interested...

tinyblob
12-08-2005, 08:35 AM
Do you still have the original zip of version 1.3?
If so, upload those files and overwrite the ones in your current install. Leave your templates folder as is. Also be sure to update the includes/pixelpost.php file with your database information.

Once you've got it up and running, upgrade to v1.4.3 ASAP! I know you said you plan to upgrade, but i can't stress enough that you need to. 1.4.3 is wayyy more secure.

raminia
12-08-2005, 09:50 AM
http://www.pixelpost.org/releases/pixelpost_1.3.zip is the link to the old release, pixelpost version 1.3

helios
12-09-2005, 07:57 AM
Thanks for the reply. I haven't had time yet to upload fresh version 1.3 files yet, will update you later on after I get some time, and let you know how it went...

thanks

steve

blinking8s
12-09-2005, 08:08 AM
please upgrade when you get the chance...

unseen
12-09-2005, 05:34 PM
that happened to me too for some reason and i wasn't even hacked. my about page just stopped working. i tried reinstalling and everything... i finally just made a new template called info_template.html and copied everything in the about template to it... i had to sort out all my links and such and had to modify some addons, but that's the only way i could get it to work.