cmps_index.php has been hacked in some way!

[DOMIN8]

OK here goes

I run a game server and a clan based website. Ocasionally we ban users from the server/website for behaviour issues and no one of them has hacked the website as soon as I installed vbadvanced. I think im on the right track but still cant find what they did to this file to make the output "virtualzero.net is BANNED"

I have created a redirect for the index.htm to forward directly to the forums for the time being but if you goto http://www.virtualzero.net/forums/cmps_index.php you willl see the hackers handy work. I have my server host tracing all the activity and soon we will have redemption but this is what I need answered if anyone can help

I have removed one like at a time of the cmps_index.php file and saved and loaded it to the server and there are 2 lines of code that change the out put.

PHP Code:

require_once('./global.php');

print_portal_output($home); 


Im pretty sure its something to do with global.php or something that it calls for.

Is there a php file i should look in or a section of the database to look for the value of " virtualzero.net is BAnned!!"

Some one please help me !!!

One more thing. the forums work fine. no glitches. if im not mistaken the forum uses the global.php quite often. So how could this be working on the forums and not in avbadvanced cmps?

[Graham]

Just re-download CMPS from Programs/Scripts and all you will have to make one change in cmps_index.php


find:

chdir('./forum');

Replace this with the full path to your forum on your server and reupload the file.

Regards.

[DOMIN8]

I have the correct value for that. What I wanna know is where is the "virtualzero.net is BANNED!!" value coming from?

[Brian]

It appears that you have your forums closed, so I can't see what you're talking about.

Down for Database relocate.. Will be down for about 60 minutes

<(VZ)> Rocks...