Hacking

[Ash]

Someone has hacked my forum and completely locked me out.  Everyone else can use it except me.

I know who it is and I can't persuade him to stop it.

Is there anything really, other than reinstalling it, I can do?

[Ben_S]

how have they hacked you?
how have they locked you out?

You need to give more info

[Ash]

Well, first he found out my FTP password and inserted some php files that he's written.  I've since changed the password.

I logged on and removed his admin powers.

I searched through all the files and compared them with the ones I had on my computer and found the ones which were modified or created on 1 May.  I downloaded them first in case they served a purpose and deleted them.  I then logged onto my forum to find that he had got his admin powers back. I went into admin to removee them again and I couldn't get in.  All the options are there, it just says I am banned from everything.

[Ash]

I've just run the installer again and I'm still banned from even entering the log in menu and viewing the homepage!

[Ben_S]

do you have phpmyadmin,

If so browse to your log_banned table and delete the entry that referes to you, then login, change all your administrator passwords and ensure you are running version 1.5.2 as there are known security holes in earlier versions that "could" enable a hacker to gain access.

[andrea]

Check also if the hacker did upload any executable files or php files.

[[Unknown]]

I recommend you ask your host for any/all access logs for the time of hacking.

-[Unknown]