My phpBB3 was hacked

[Divvy]

Hello guys,

My phpBB was hacked by TimThumb.
Im using 3.0.2 and now I will update my version today.

But before doing that, I want to enter in my ACP, because I cant enter anymore as admin, appears this error:

Access to the Administration Control Panel is not allowed as you do not have administrative permissions.

I tried to run this command to add a new admin user, but same message appear to new admin user:
http://www.phpbb.com/community/*****...bf2c#p11536485

I also installed Support Toolkit but appears this error when I access to http://www.mydomain.com/stk/

This is my common.php file code:
http://paste2.org/p/2028741

Please help...

Thanks

Divvy Reviewed by Divvy on 19th May 2012. My phpBB3 was hacked Hello guys, My phpBB was hacked by TimThumb. Im using 3.0.2 and now I will update my version today. But before doing that, I want to enter in my ACP, because I cant enter anymore as admin, appears this error: I tried to run this command to add a new admin user, but same message appear to new admin user: Rating: 5

[Qoo]

I don't really know phpbb but what I can suggest you is go to your database and see which user is in the admin group and do a password reset (delete table contents, add new password - md5).

[iAmDjmAd]

your admin a.c was hacked

[smoky]

phpbb3 is one of the top forum boards you can get but you MUST always stay up to date with the new versions, good luck with fixing things.
and i would do what Qoo said

[pi0tr3k]

Yes, do what Qoo said, go to yourdomain.com/phpmyadmin , log in, find your username and change password / permissions.

Good luck.

[Divvy]

Hello guys, thank you for your help!

I did what Qoo said but didnt worked...
I also did this:

In phpmyadmin, run the following, which will create an admin user named admin1 with a password of admin. From that point you should be able to get into the ACP. Change your table prefix if it is not phpbb_.

INSERT INTO phpbb_users (user_type, group_id, username, username_clean, user_regdate, user_password, user_email, user_lang, user_style, user_rank, user_colour, user_posts, user_permissions, user_ip, user_birthday, user_lastpage, user_last_confirm_key, user_post_sortby_type, user_post_sortby_dir, user_topic_sortby_type, user_topic_sortby_dir, user_avatar, user_sig, user_sig_bbcode_uid, user_from, user_icq, user_aim, user_yim, user_msnm, user_jabber, user_website, user_occ, user_interests, user_actkey, user_newpasswd) VALUES (3, 5, 'Admin1', 'admin1', 0, '21232f297a57a5a743894a0e4a801fc3', 'admin@yourdomain.com', 'en', 1, 1, 'AA0000', 1, '', '', '', '', '', 't', 'a', 't', 'd', '', '', '', '', '', '', '', '', '', '', '', '', '', '');

And also didnt worked...

Can someone help me fix this error when I try to run Support Toolkit ?
http://i.imgur.com/K5rJC.png

Thanks!

[bluefrogx]

Add in error_reporting(0) to the top of the file for the support toolkit. that will supress the error message and allow headers.

[Gavo]

This site is using a hacked database of W junction