Prestashop was hacked?

[SpringDay.com]

Someone was able to get in to my Prestashop as admin, basically disable it, and they changed the admin.

So, I cannot login to admin, therefore I cannot go in and fix the mess.

Please give me a clue as to how I can take my Prestashop back over.

Thanks.

Shop is here: http://Store.WorldWideRetro.com

[Patric]

This may not be PrestaShop that has been hacked, but your BO password...

A lot of topics talk about how to reset the admin password in the database.
Watch this one :
http://www.prestashop.com/forums/viewreply/92709/

[SpringDay.com]

Is this going to work if the person that got in to the back office has removed me as an admin?

[SpringDay.com]

I just followed the instructions on http://www.prestashop.com/forums/viewreply/92709/ exactly. Still can't login to Back Office.

[Patric]

No. The admin must exist. This is the case ?

[SpringDay.com]

It exists, I did the MD5 thing, can't login.

[Ardian Yuli Setyanto]

same with Patric, i think its not an error in Prestashop but may be incorrect password. Because many times I found Admin can't login to BO with this error mesage. May be because Prestashop generate new md5 hash as configured in BO

[SpringDay.com]

I just need in. Shop is down. HOW DO I GET IN?

[Radu]

if you are desperate please try this:
!!! you should at least know the admin email - if you don't go and check the database

go to classes/Employee.php
after:

public function getByemail($email, $passwd = NULL)
{

add:

$passwd = NULL;

then log in using your email and enter any password. after you solve your issues don't forget to change:
1. admin directory
2. revert the above changes

good luck!

[gonebdg - webindoshop.com]

IF YOU STILL CONTROLING YOUR DATABASE ... AND HAVE DATABASE BACKUP

go to your phpmy admin page to check ps_employee table in your database.
You can see if something going wrong just like you said

Then you just have to restore your ps_employee table database backup

And ...
it will be more better if you have backup file : "setting.inc.php" that sycronize with your ps_employee database backup
so you can restore it too
just incase the hacker is also changging cookie key inside your "setting.inc.php" file


good luck !

[SpringDay.com]

Alright guys,

I have tried everything listed here plus some of my own stuff. Prestashop still doesn't work, I still can't login to the back office. I need some help here. Prestashop has been down nearly a week now.

[codegrunt]

Are you sure that your site was "hacked"? A quick peek are your store link makes it appear that you might have a .htaccess problem (something messed with mod_rewrite rules) or perhaps you have paths off in your config file. If it was just a password problem here you would have not have the redirection mess you have now.

Example:

http://store.worldwideretro.com/admin/

leads to a 404:

Not Found

The requested URL /home/worldwid/public_html/index=shop&file=admin was not found on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

So something is up with your settings, probably in a .htaccess file trying to rewrite the URI.

Cheers