Bug Possible Admin CP / Mod CP / DBSEO CP exploit attempt!

[Richieboy67]

I bought this today for a client and when trying to access the cpanel I get Possible Admin CP / Mod CP / DBSEO CP exploit attempt!.. I need to fix this asap because I am doing an import from vbseo..

Thanks

 

[Fillip H.]

This will happen if you have renamed your AdminCP directory but did not rename the admincp references in the .htaccess file.

Can you please double-check that?

 

[Richieboy67]

Yeah, Thank you. I had it set that way but I changed it back last night and still had the same issue. I still get the error even if the .htaccess file is removed..cannot access cpanel of dbseo.

 

[Fillip H.]

Could you please create and PM me with a temporary FTP and AdminCP account?

For security reasons, we recommend you create a new FTP account only for DBTech support, then disable or delete it after we have both confirmed the issue has been solved and there are no further issues.

The same applies to AdminCP accounts; they should ideally be temporary accounts created for us only. If we have created an account on your site already, you can optionally boost that account to Administrator and then de-admin this account once the issue has been solved.

If you use a .htaccess password protection for your AdminCP directory, it is recommended that you create a new authorised user for DBTech and remove this user once the issue has been solved.

Please test any temporary accounts you create to ensure that the FTP account has access to the forum files, and that the AdminCP account can access the administrative controls for the product we are assisting you with.

Ensuring this is all in order before submitting the information will significantly speed up the process of assisting you. We will alert you via PM if there's any issues with the login information you have provided.

When sending the PM, for your security you should also un-tick the "Save a copy in my Sent Items folder" checkbox. When the access details have been received, we will delete the PM from our inbox. Ensuring you have not kept a copy of the PM reduces the risk of security breaches.

Thank you for helping us debug our products and allowing us to assist you, we appreciate it

 

[Richieboy67]

Sure, give me a few minutes to set you up.
Thanks friend

 

[Richieboy67]

Info sent. Thanks

 

[Fillip H.]

This FTP account cannot access the forum files, you forgot to change the Home Directory in the FTP Accounts manager to / before saving the account.

Please let me know when this has been corrected.

 

[Richieboy67]

I corrected this yesterday and sent you a pm. Can we please address this asap? I tested the new ftp account.

 

[Fillip H.]

The login credentials you provided do not work, I receive login authentication errors.

 

[Richieboy67]

Please try again, should work now because I am currently logged in. Use the new one I just sent through pm. Thanks

 

[Richieboy67]

All set?

 

[Fillip H.]

I updated the .htaccess file and the DBSEO CP now works as intended. I imported the vBSEO URL structure and configured the mod for you as well

 

[DragonByte Technologies]

Hello Richieboy67,

This ticket has now been closed with the status Not A Bug.

We hope your issue or question has been addressed to your satisfaction. If not, please feel free to re-open it by clicking this link.

If you have any further issues or questions, please feel free to start a new support ticket via the button at the top of every page.

Thank you!