Hacked, restored then moved server now Admin log in problems......

Hi as mentioned in the subject line, a week ago, we got hacked, everything was deleted, fortunately the host managed to find backup, which was restored. We then decided, that as the host would not give us any help as to how the site was hacked, its been migrated to a new host.

Since all this has happened, I cannot log in to my admin panel. It says it doesnt recognise my username or password and what’s even more frustrating it cannot find my e-mail address.

What file is the log in details kept in, so that I can check on them.

Can somebody point me in the right direction please?

Thank you.

John.

Hi John,

You would need to use something like phpmyadmin which allows you to log into the database and manage the tables then go to your database and to the table modx_manager_users

In there browse the data and you should see a field with your regular username you then need to edit the field so type in your new password and in the drop down open select MD5 this will encrypt the password to how MODx likes it.

Once you have done this you should be able to log back into the manager.

Aaron

Forgot

1. Go to the table modx_manager_users
2. Edit record id 1
3. username = admin
4. password = e10adc3949ba59abbe56e057f20f883e
5. Save record
6. Exit database application
7. Go to Modx Manager login
8. Username = admin
9. Password = 123456


Blocked

1. Go to the table modx_user_attributes
2. Edit record id 1
3. blocked = 0
4. Save record
5. Exit database application
6. Go to Modx Manager login
7. Login with your username and password

Hi, thank you for your help, @Kristalin your instructions were very helpful, I am now in the admin control panel.

Thank you again,

John.

Hi, I have found myself locked out of the manager area again, but this time, none of the things mentioned above will allow me in. I have tried everything. Nothing is working. I have no idea why.

Can somebody help please?

Thank you.

Have you changed your username and password after your tried Kristalins solution?

Do your browser remember your (old/wrong) username and password?

Have you deleted your cookies in the browser before login?

Are you sure that the files from the backup not are compromised by the hackers?