HACKED! Any ideas on how to recover? Password recovery?

Make sure you’ve got a valid email in your manager user and press the forgot password button.

Quote from: rthrash at Dec 08, 2006, 09:00 AM

Make sure you’ve got a valid email in your manager user and press the forgot password button.

How can I set the email address of a user in the db?

Quote from: trumpetmic at Dec 08, 2006, 09:13 PM

How can I set the email address of a user in the db?

Look in the {TABLE_PREFIX}user_attributes table for the email field and update it.

Quote from: OpenGeek at Dec 08, 2006, 09:23 PM

Quote from: trumpetmic at Dec 08, 2006, 09:13 PM

How can I set the email address of a user in the db?

Look in the {TABLE_PREFIX}user_attributes table for the email field and update it.

phpmyadmin is telling me that there are no values in the user_attributes - email table

any ideas?

For each user in the manager_users table there will be an entry in the user_attributes table. Browse the user_attributes table, and edit the rows as you wish. Just don’t change the internalKey value; this is the value that matches up with the user ID in the manager_users table.

Hmmm... it seems that there are no email addresses currently stored. Here’s what came up when I browsed the email table in the user attributes:

MySQL returned an empty result set (i.e. zero rows). (Query took 0.0006 sec)

Am I reading this correctly?

Quote from: sottwell at Dec 08, 2006, 10:26 PM

For each user in the manager_users table there will be an entry in the user_attributes table. Browse the user_attributes table, and edit the rows as you wish. Just don’t change the internalKey value; this is the value that matches up with the user ID in the manager_users table.

Here’s what I see when I browse user-attributes, email:
MySQL returned an empty result set (i.e. zero rows). (Query took 0.0006 sec)

Well, then, somebody really did a job on your site, because you cannot create a user without a valid email address. Are you sure you’re in the right table? There is also the user_settings table, as well as web_users, web_users_attributes etc.

If you find that you do need to recover the user_attributes, you can enter the values manually, just make sure that the internalKey field matches up to the appropriate ID in the manager_users table.