flyclothing Posted October 14, 2013 Share Posted October 14, 2013 I updated my store to 1.5.6.0 and now the store and database are gone. When I login to the admin, it says "The Employee does not exist, or the password provided is incorrect." I am sure this is because the database is gone. Here is the store error: Shop not found at line 384 in file classes/shop/Shop.php Link to comment Share on other sites More sharing options...
Guest Posted October 14, 2013 Share Posted October 14, 2013 I updated my store to 1.5.6.0 and now the store and database are gone. When I login to the admin, it says "The Employee does not exist, or the password provided is incorrect." I am sure this is because the database is gone. Here is the store error: Shop not found at line 384 in file classes/shop/Shop.php IS this your site? http://www.flyclothing.com/ Works fine for me - try clearing your computer caches Link to comment Share on other sites More sharing options...
flyclothing Posted October 14, 2013 Author Share Posted October 14, 2013 haylau, You are a sleuth. LOL. Yes, that is my site but not the site in question. This is the site: http://184.154.6.200/ Link to comment Share on other sites More sharing options...
flyclothing Posted October 14, 2013 Author Share Posted October 14, 2013 I also found this in the access logs. Is this a hack? This is not our IP address. 91.142.209.154 - - [13/Oct/2013:07:35:21 -0500] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 10644 "-" "ZmEu"91.142.209.154 - - [13/Oct/2013:07:35:21 -0500] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 10644 "-" "ZmEu"91.142.209.154 - - [13/Oct/2013:07:35:22 -0500] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 10644 "-" "ZmEu"91.142.209.154 - - [13/Oct/2013:07:35:22 -0500] "GET /pma/scripts/setup.php HTTP/1.1" 404 10644 "-" "ZmEu"91.142.209.154 - - [13/Oct/2013:07:35:23 -0500] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 10644 "-" "ZmEu"91.142.209.154 - - [13/Oct/2013:07:35:24 -0500] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 10644 "-" "ZmEu" Link to comment Share on other sites More sharing options...
Guest Posted October 15, 2013 Share Posted October 15, 2013 posibbly a hack Try search google for "ZmEu" it does come up with potential threats Link to comment Share on other sites More sharing options...
flyclothing Posted October 15, 2013 Author Share Posted October 15, 2013 Yeah, my host found that it was an attempt to exploit also and blocked it. I actually believe our upgrade was ok, but for some reason the site database just disappeared a couple of days later. We are still investigating it and may just have to restore the cart prior to upgrade and try again. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now