Hoping someone has seen this before & can point out a solution.
Recently a client site [evolution] had been hacked, we cleaned up the malicious files & updated to the latest evo. Never did find out how they got in. [a strange file with encoded string was added to /assets/site/charset10.php ]
Things went smoothly for a while, then they started getting spam form submission, scanned the site, found nothing, but the manager users could not log in any longer. Tried to change the manager password in the database manually and found:
The database user does not have permissions to alter any tables in the database!
no clue as to how that could happen, further, the main manager user's encrypted password was changed to: uncrypt>0878...3852
Any thoughts on this one?
*** Not just websites, we also create signage, banners, print, trade show displays and more! ***
Sean Kimball CLP, CLS.
Technical Director / Sr. Developer | BigBlock Studios
._______________________________________________.
Bigblock Studios
http://www.bigblockstudios.ca Web site design & development.
27-1300 King Street East. Box 167 Oshawa, Ontario L1H8J4 Canada.
phone/fax: 905-426-5525
