Page 1 of 1

[Solved]Someone has hacked my username & password

Posted: Tue May 20, 2014 11:46 am
by Biggles_downunder
I have tried following a couple of other threads on issues similar to this but, as I know just enough to be dangerous, I've come to a bit of a screaming halt.

Here's what I have done so far:

I have used the phpmyadmin application on my host control panel to have a look at the cms_users table and can see that my credentials have been changed to 'admin' for the username and there is a long string of seemingly random characters for the password.

It seems like I can double click on the fields and directly change the values, but I am reluctant to do anything in case it breaks something.

Can anyone step me through the process to allow me to get back into my website.

So far, as far as I can tell, nothing malicious has been done to the site or its content but I need to be able to get back in fairly quickly.

The site is one I maintain for a medical team that does voluntary work in Uganda. (http://www.maranathahealth.org)

Re: Someone has hacked in and changed my username & password

Posted: Tue May 20, 2014 11:53 am
by Jo Morg
Read this: http://docs.cmsmadesimple.org/troublesh ... d-recovery.
The site appears to be clean. But it's difficult to say by just inspecting the source. Also you may want to consider this: http://docs.cmsmadesimple.org/general-i ... ring-cmsms

Re: Someone has hacked in and changed my username & password

Posted: Tue May 20, 2014 11:53 am
by velden
a long string of seemingly random characters for the password
That's a hashed and possibly salted password.

Read this article: http://docs.cmsmadesimple.org/troublesh ... d-recovery

Re: Someone has hacked in and changed my username & password

Posted: Tue May 20, 2014 12:14 pm
by Biggles_downunder
Thank you both for such a prompt reply. I read the article on resetting the password but (forgive my lack of knowledge) can you tell me how I actually run that query?

Do I do it from within the phpmyadmin application?

Re: Someone has hacked in and changed my username & password

Posted: Tue May 20, 2014 12:48 pm
by Jo Morg
Biggles_downunder wrote:Do I do it from within the phpmyadmin application?
That's exactly it. Under the SQL tab. Remember to adjust it to your case:
Fill in your username at "USER_NAME" and your desired password at "NEW_PASSWORD"
We assume your database prefix is "cms_".
If it is a standard installation the prefix is cms_ so, no need to change it.

Re: Someone has hacked in and changed my username & password

Posted: Tue May 20, 2014 12:58 pm
by Biggles_downunder
How can I thank you enough Jo??

I am now in and am busily changing all passwords, users etc.

Thank you again!!

Re: Someone has hacked in and changed my username & password

Posted: Tue May 20, 2014 1:02 pm
by Jo Morg
Glad you solved it. Pleas just add [Solved] to the beginning of the subject of the 1st post. Thanks.