[Solved]Someone has hacked my username & password

[Biggles_downunder]

I have tried following a couple of other threads on issues similar to this but, as I know just enough to be dangerous, I've come to a bit of a screaming halt.

Here's what I have done so far:

I have used the phpmyadmin application on my host control panel to have a look at the cms_users table and can see that my credentials have been changed to 'admin' for the username and there is a long string of seemingly random characters for the password.

It seems like I can double click on the fields and directly change the values, but I am reluctant to do anything in case it breaks something.

Can anyone step me through the process to allow me to get back into my website.

So far, as far as I can tell, nothing malicious has been done to the site or its content but I need to be able to get back in fairly quickly.

The site is one I maintain for a medical team that does voluntary work in Uganda. (http://www.maranathahealth.org)

[Jo Morg]

Read this: http://docs.cmsmadesimple.org/troublesh ... d-recovery.
The site appears to be clean. But it's difficult to say by just inspecting the source. Also you may want to consider this: http://docs.cmsmadesimple.org/general-i ... ring-cmsms

[velden]

a long string of seemingly random characters for the password

That's a hashed and possibly salted password.

Read this article: http://docs.cmsmadesimple.org/troublesh ... d-recovery

[Biggles_downunder]

Thank you both for such a prompt reply. I read the article on resetting the password but (forgive my lack of knowledge) can you tell me how I actually run that query?

Do I do it from within the phpmyadmin application?

[Jo Morg]

Do I do it from within the phpmyadmin application?

That's exactly it. Under the SQL tab. Remember to adjust it to your case:

Fill in your username at "USER_NAME" and your desired password at "NEW_PASSWORD"
We assume your database prefix is "cms_".

If it is a standard installation the prefix is cms_ so, no need to change it.

[Biggles_downunder]

How can I thank you enough Jo??

I am now in and am busily changing all passwords, users etc.

Thank you again!!

[Jo Morg]

Glad you solved it. Pleas just add [Solved] to the beginning of the subject of the 1st post. Thanks.