We are under attack! help

[Eyelfixit]

So these guys have no way to access your cpanel or forum admin pages yet they are still able to delete threads?

There's only 3 people wit haccess to the Cpanel, Me, Nonya (staff here) and Mike (the owner). and no there's no way that they can have access that way.

As for the actual forum, this is also not a posibility becuase we have demoted everyone except for 4 people, Me, Nonya, Admin (mike, the owner) and a (G-mod, (Overlord) he's a long time friend of mine so I trust him).

We used to have 14 Gmods and 6 mods I think. but not anymore.

And it's not deleteing thread, it deleting the database. Oh yeah what do I have to do to re-install the backups? This is not like phpBB which I am really familiar with.

Thanks.

[Gobalopper]

Do you have any ideas yet how the database is getting deleted? If they are doing it through YaBBSE then you should be able to track it.

What format are the backups in?

[Eyelfixit]

I have great news, this moron has been caught, with a little luck he won't do this again. We have all of his info right down to a street address and a phone number.

Thanks for the suggestion of the Raw access logs, that's what broke the case wide open  

The format of the backups are in SQL files

[Gobalopper]

Thats good to know, any idea why they did it?

If they are just sql files you should be able to just run the INSERT queries to restore lost messages and maybe members.
But be careful if you already have started the board back up as there are bound to be conflicts. Probably best to start from your backup file and delete what you have now.

[Eyelfixit]

Thats good to know, any idea why they did it?

If they are just sql files you should be able to just run the INSERT queries to restore lost messages and maybe members.
But be careful if you already have started the board back up as there are bound to be conflicts. Probably best to start from your backup file and delete what you have now.

Sorry, can you explain to me in steps how I would use the insert querries. I'm clueless at this sytem still. sorry  

[Eyelfixit]

Not sure why he did this but from what I know, he followed another staff member to the board. (this staff member got hacked previously).

[Gobalopper]

Well after deleting the current database you would just upload the sql file and run it in mysql. I don't know if you have command line access but if you do just run mysql and type in:

\. location/of/filename.sql

[Eyelfixit]

Well after deleting the current database you would just upload the sql file and run it in mysql. I don't know if you have command line access but if you do just run mysql and type in:

\. location/of/filename.sql

Ah, so simple, yet was hard to find, thx and yes, we do have command prompt access.

Do you yahoo?, if you do please contact me, nick: eyelfixit