'Roger Foodbelly' site taken down?

[jannar85]

Holy.. Please tell me there's some kind of backup of our files, or we might have lost 50% of the game, and sets us back three years....

There's just this index file now, saying:
Site has been taken down due to its files being compromised by a hacker.

Link:
http://rogerfoodbelly.adventuredevelopers.com/


I know there was one setup file there, that I renamed, that belonged to our development forum (used that to update it), but heck.. Why didn't someone send me a message before the whole site got removed?

Where's everything?

[Zaarin]

The files made the antivirus go mad when they were moved so the whole site was put outside the www root so no one would open it in their browser and get infected. One of the PHP files were also continuously running and eating up the CPU. There was a lot of problems with several sites during the move, and we didn't know how to contact everyone. :S

Everything that was in the rogerfoodbelly folder is now in rogerfoodbelly_hacked in the main FTP root. Someone with access to the main adventuredevelopers FTP account can retrieve it for you. Erwin_Br?

If you intend to bring the site back online, please go through everything to make sure it's secure.

[jannar85]

Aaahh, Zaarin. Thanks for making my day!
Yes, I intend to bring the site back online. You know if the forum databases were touched?
That's weird, though. Can you tell me which files it was? The only php files that I had there, was the dev forum. I'm not the most skilled forum guy around, so maybe I did something wrong, that caused the site was eating CPU. Sorry for that.

Good news, Roger is still going strong, it seems

[Zaarin]

The database was moved and should have the same login as on the old server.

All the HTML and PHP files contain bad javascript. Usually an obfuscated block of it. It seems like they also partially deleted the original HTML as the old index.htm file contains just javascript now. The file phdinfo.php should be deleted completely as it lets anyone run PHP code on the server from the browser.

[Erwin_Br]

I'm preparing an archive with the contents of the old site right now.