Site hacked. Can't find my databases now! (PHP MyAdmin)

  • Resolved agoraphone

    (@agoraphone)


    8 years, 4 months ago

    I have a total of 5 websites with different domain names running on my home server. This has been going fine for a while, but I think one of the sites got hacked. The site itself still runs fine, but the blog section of the site is now full of entries that I didn’t create. I am unable to log in to the WP admin and change anything on just that site, so apparently the hackers changed the password.

    So I read the way to reset the password is through the database. The problem is, when I go to do that by opening https://localhost/phpmyadmin, I don’t see any of my sites’ databases anymore. I see DBs called information_schema, mysql, and performance_schema.

    The fact that all the sites are still running leads me to believe I’m just confused and perhaps looking at the wrong instance of phpmyadmin. In fact, I went and renamed the phpmyadmin folder to just “x” and I’m still able to access phpmyadmin, which confuses me further.

    I want to get a real host and move all my sites there, but in order to do so, I’ll need to find my databases! Any helpful thoughts would be appreciated.

Viewing 6 replies - 1 through 6 (of 6 total)
  • Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    The fact that all the sites are still running leads me to believe I’m just confused and perhaps looking at the wrong instance of phpmyadmin.

    You said this is on a home server. Do you have access to the mysql command line?

    mysql -u root -p will get you into mysql

    once there type show databases;

    That will give you the list of databases.

    Thread Starter agoraphone

    (@agoraphone)

    Thanks for the suggestion! I was indeed able to log in through the command line and see the databases that way. Any idea why I’m not seeing them in the web interface?

    I guess if I can’t get to them via the web, then there’s probably a way to export them through command line.

    Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    Any idea why I’m not seeing them in the web interface?

    phpmyadmin may be set up incorrectly or you’re not logging in there with the right credentials.

    use the “mysqldump” command to export your databases

    mysqldump -u root -p databasename > databasename.sql

    Thread Starter agoraphone

    (@agoraphone)

    phpmyadmin may be set up incorrectly or you’re not logging in there with the right credentials.

    Yes now I think we’re getting somewhere. When I access the php web interface, it doesn’t ask me to authenticate. I was thinking before that I was authenticated via cookies, but I don’t think that’s the case. I don’t see how to log out of the admin though, or how to force it to ask me for a login. Any thoughts?

    Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    https://stackoverflow.com/questions/16873448/logging-out-of-phpmyadmin

    Thread Starter agoraphone

    (@agoraphone)

    Thanks for all your help – I’m all set now

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘Site hacked. Can't find my databases now! (PHP MyAdmin)’ is closed to new replies.