My Gallery is GONE!

kreative · May 27th, 2008, 09:21 AM

Coming back to work after the long weekend and I find that my whole gallery is reverted to the original gallery with NO images (there were thousands) and NO users (there were hundreds) in it. Does this sound like I was hacked and someone deleted everything? We were not home all weekend and have not touched it.

kreative · May 27th, 2008, 10:24 AM

My hubby is a DBA and he was able to restore it, but he said it looked like a hack. I haven't heard of any security issues, but I also have not updated my software to 6.1 yet... I'm on 6.02.

rcsmith · May 27th, 2008, 02:53 PM

if you have any directories with 777 permissions, someone could slip a script in there and run it. it happend to me, someone insereted an iframe code into every html and php file that had those permissions.

Michael P · May 27th, 2008, 06:57 PM

Did you leave the install.php or upgrade.php scripts in the directory?

It takes more than 777 permissions to upload a file to a directory; they need something that lets them load the file there to begin with. Generally speaking a gallery has to have write permissions to a directory where it needs to place files, so taking away write permissions would make a gallery inoperable.

kreative · May 27th, 2008, 09:49 PM

Ok, it happened again...

Our config-inc.php file is being overwritten... We have it on 644, not 777.

kreative · May 27th, 2008, 10:13 PM

Ok, yup... we did have the install.php still in there, THANK YOU! We will see if he can get in now!

We are just having problems with the images showing up once you click on them... no images show up even the buttons... so I will see if hubby can fix that in the meantime. If anyone has any ideas, I would love feedback!

Thanks again!

kreative · May 27th, 2008, 10:52 PM

Got it fixed!

rcsmith · May 27th, 2008, 10:54 PM

what was it?

trackpads · May 27th, 2008, 10:57 PM

They left the install.php file in the main directory after the install.