Noob question .. Website .. :(

The Apprentice

Ok just to give u backround etc

Had someone doing my updates on my website and we have had a falling out.
I have the hosting password, ftp login and also cpanel login of the website but alas i cannot change the bloody content on the website and its starting to peev me.. ive checked everywhere online and cant seem to find an answer to this solution

Im after the webmaster admin password really ??
I dont not have the email to reset the password and i cannot/do not have the original password as it was changed.
Any ideas please !!!!

Eg.. tomsilagetractors.com/admin (thats not it )


Many thanks guys

NeverSayDie

You're not likely to get a useful answer here, as it depends entirely on how your site was put together, and what exactly this "webmaster admin" password relates to. Unless it happens to be based on a default setup of some well known CMS/software package, no one here is going to be able to help you.

As you have access to all the files and other material on the site, find another developer and get them to modify the code to bypass use of the admin password or fiddle a DB/files to reset the thing to some base state, I'd reckon. (Assuming the code is in some freely accessible form like PHP, not compiled). Or just delete the site and start over if you want.

Evil Phil

I guess you could phone your hosting company's tech support and get them to help you out. I'm going to move this over to design and its really a question for there anyway.

John_Mc

Login to your cpanel and check what databases are there. This should tell you if there's a CMS installed and if so, which one. You should be able to look up documentation on how to use it then.

If there isnt any DB there, login to the FTP and download whatever files you want to change. Make a backup of it, and then edit the text. Upload the file and see if you're happy. Be careful on the FTP as you dont want to rename/delete any files on there.

The Apprentice

If i was to let someone in to try and reset the password could i do that without compromising site security could i !!!

Im trying now to check the cpanel again but just cannot put my finger on it.
I did email the hosts but they just sent the bog standard "here.s what we have and we cant help u msg"

I certainly dont like the whole backup and delete the site sort of scenario !!


We,ll see what develops.. awaiting the host on the second email i sent them !!

John_Mc

The Apprentice wrote: »

If i was to let someone in to try and reset the password could i do that without compromising site security could i !!!

Im trying now to check the cpanel again but just cannot put my finger on it.
I did email the hosts but they just sent the bog standard "here.s what we have and we cant help u msg"

I certainly dont like the whole backup and delete the site sort of scenario !!


We,ll see what develops.. awaiting the host on the second email i sent them !!

If you trust someone, then you're not compromising security by giving them the credentials to login. Ideally, you would get them to show you how to use it.

If your website doesnt have a CMS, then the developer maintaining your website was manually editing the files and uploading them to the server using FTP.

If you are uncomfortable with the technique of taking a copy of a file as a backup before changing it, then I'm afraid you are very much out of your depth and will do more harm than good trying to change the website.

The Apprentice

Ive since "educated" myself on whats going on ..

Apparantly its been hacked by someone :S .ru

I have gotten the php myadmin up .. i have searched the admin and i have found the hash key for the admin password.
I cannot seem to change the details nor change users so im at the minute trying to decypt the password using a md5 dectypting tool.. it might take a while.

I cannot tell by looking around if anything is changed or damaged im not 2 familer with whats going on under the hood..
But seeing johns encouraging comments have made me determined to get this working.

John_Mc

The Apprentice wrote: »

Ive since "educated" myself on whats going on ..

Apparantly its been hacked by someone :S .ru

I have gotten the php myadmin up .. i have searched the admin and i have found the hash key for the admin password.
I cannot seem to change the details nor change users so im at the minute trying to decypt the password using a md5 dectypting tool.. it might take a while.

I cannot tell by looking around if anything is changed or damaged im not 2 familer with whats going on under the hood..
But seeing johns encouraging comments have made me determined to get this working.

I gave you advice and you replied telling me you weren't even able to backup a file. To "encourage" you further would be unwise.

You're absolutely welcome for the advice by the way :rolleyes:

Axwell

The Apprentice wrote: »

Ive since "educated" myself on whats going on ..

Apparantly its been hacked by someone :S .ru

How did you come to this conclusion?

The Apprentice wrote: »

If i was to let someone in to try and reset the password could i do that without compromising site security could i !!!

If you have that attitude why come on here looking for help at all, if someone offered to look at the files for you then you are going to think they are out to compromise your security and do something terrible to your site.

You have gone from being a noob to a decryption specialist in the space of a few hours, im impressed but if you let someone who knew what they were doing look at it for you then you probably would have got the password ages ago from one of the admin files on the server. Best of luck with fixing it though.

bobbytables

The Apprentice wrote: »

im not 2 familer with whats going on under the hood..

I'm not trying to be smart or intentionally tell you what you don't want to hear but before you said what I quoted you on above, it was evident that this was the case. The logic is simple, if you are not an industry professional, don't get frustrated by the fact that you can't do it yourself. To understand how all these systems work, takes years of dedicated learning and it never ever stops.

People who try to do this stuff on the cheap end up getting what they paid for in the long run. If they don't realise this now, they will later. I do not expect you to respond with anything other than utter frustration, because to finally accept this reality is painful. The web industry is competitive, but not on price. If a professional agency quotes you thousands for a project and a neighbours kid says they can do it for hundreds, I promise you, what you will end up with will not be the same thing. The difference in quality might not always be apparent straight away, because "how a website looks" is only part of the solution, yet is often the benchmark 99% of the time, until something behind the scenes goes wrong.

Usually when something does go wrong, and people look for help the next time, only then "how it looks" starts to take a back seat. Just like where you are now.

I'm not going to jump to conclusions but I doubt very much that the last person to work on this site for you was part of a professional agency and more likely someone who negotiated with you purely on price or just offered to do it cheap or maybe even free/barter.

My advice to you is this, focusing only on price and not appreciating the value of paying a professional will just result in you throwing small amounts of money away often with little or no return. Employing a professional agency that yes!; involves a greater level of investment is the equivalent of you putting that money in a savings account.

I definitely am not trying to offend you, and I genuinely sympathize with your situation, it is terribly frustrating I bet. My only consolation to you until you do pay a "professional" to work with you is that you are not alone in your situation.

Cheap starts well, but never ends well, always.

The Apprentice

http://www.zen-cart.com/forum/showthread.php?t=130161




It seems it was hacked using this method.. ive sinced "educated" myself again on how to change the password from the admin files which obviously will not work.
So trying to get that password is utterly pointless at this time.

And axwell seriously i dont have an attitude i asked for help.. not for someone to do it because if i did i would have paid someone to do it.

As looking down i dont recall or remember anyone that could or even would have a look at it.
If they did i would have most likely offered to pay them for there time which i think is fair.. might possibly put a post up.



Cheers bob i usually agree but when theres a budget theres not much that can be done about that its unfortunate.

pablo21

If you have cpanel and ftp access, and you trust someone to do it for you, I'll get you access. PM me if your not sorted yet.