HELP - Website crashing

[Huski]

Not sure what has happened but all of a sudden the website front end and the admin site has just crashed. My client has probably been on the admin site doing stuff but can't tell me anything of note - all I am getting is errors las below

Warning: require(includes/languages/.php) [function.require]: failed to open stream: No such file or directory in /home/anim/public_html/includes/application_top.php on line 315

the website has been working perfectly until today when this happened so what can make this happen - no-one has made any amendments to pages

[jpf]

File name is missing!

You client borked something and deleted something very important.

Possibly changed/deleted the languages.....???

[Huski]

What could they have done do you think? They have no access to FTP so can't change actual files on the server directly? Could they do something in the Admin section that would cause this?

[Huski]

This is the other line of the error messages on screen


Fatal error: require() [function.require]: Failed opening required 'includes/languages/.php' (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/anim/public_html/includes/application_top.php on line 315

[Huski]

This is the code on the above line

require(DIR_WS_LANGUAGES . $language . '.php');

[pgmarshall]

Have you checked your configure.php files in includes and admin/includes.

It looks like you have lost your pathway definitions.

Just checking but I assume you have disabled the Admin --> Tools --> File Manager?

and Admin --> Languages --> is set correctly ... (You can check this one via phpMyAdmin in the configuration table ... use

SELECT * FROM `configuration` WHERE `configuration_key` like '%LANGUAGE%'

to check it. If it is English it should be set to en)

Regards,

[Huski]

This is not good - there are no records left in the database - not one table has anything in it - what could have gone wrong here. I am the only one with any FTP or direct file/database access and have not been to the site in a few weeks.

the only other person who uses the site is the owner who gets into the admin. Is there anything they could have done in the admin site itself that could kill all the data in the database???

I am not switched anything off in the admin site - what should be turned off, etc to stop anything from happening? How to do this?

To go back to the client and say all their data has gone down is going to go down very very badly

Aaarrgghgh - help

[Huski]

Ok - I guess all I can do now is to run some sort of script on the database to add some data or something so that the website will actually show and I can access the admin site. Where do I look for this - don't want to touch any of the files on the front end as so many changes have been made - and with the database - all the tables are actually still there - there is just no data in anything.

Client doesn't seem to think they did anything differently when adding products and info in the admin site so I am guessing that there must have been a security hole somewhere. Hopefully someone can shed some light on this.

[michael_s]

So are there any tables in the database? Just no records?

You could run the osCMax.sql file on the database to rebuild the osCMax structure, but it will wipe any data that is left. I suggest taking a mysqldump of the existing database to backup the existing db for later examination.

Next, yes you could have been hacked, but it would not be at the http level that allowed access to your database (unless you are running a really old version of the software). A compromised admin/ftp/control panel password would allow access to the database login/pw info that would definitely allow a db deletion.

The best thing would be to change all passwords on the site, wipe all the files, restore from a clean backup of both files and database. Then make sure all the permissions are set properly.

One other thing : You should never leave any directory at 777 permissions as you will get hacked - it is only a matter of time.

[Huski]

Thanks - all the tables are there - but NO data at all. How do I run the .sql file exactly - do I import it - don't know exactly but I would figure it out eventually.

It was the latest version of oscmax with updates - there are no 777 permissions - and I can't see how the password could be compromised given that there are only 2 of us using it (me hardly ever using it) and the password being very strong.

If I run the script will it actually delete tables and reinstate them or just update them - I have installed a few mods as well so hopefully they won't be affected.

Cheers