[Forum] Users can't edit, qoute, send PM's.. I need some help!

[TheLiarMask]

Hi
Recently, I backed up my forum after Arabs hacked it. why dam?!
anyway, since than, members in my forum can't edit, qoute, and sometimes send PM.
and everytime, when you try to post new message in the "Quick post" you are getting the message that you get when you are trying to leave the page.. "Do you sure you want to leave this page? yes\no".
after you clicks the "yes" the page reloaded and the message appear.

2 Nov update:
"VERY IMPORTANT!!!
I FOUND OUT THAT WHEN I EDIT POST THAT NOT CONTAIN HEBREW CHARS (WHICH MEAN: CONTAIN ENGLISH LETTERS OR NUMBERS OR "." "," AND ETC'), ITS WORKS PERFECT.
ANY UNICODE BUG??"

[Matthew Gordon]

A few things to try: re-upload all the vBulletin files except for install/install.php, overwritting the files on your server. Go to Admin CP -> Styles & Templates -> Download / Upload Styles and click "Import" at the bottom to re-import the master style. Run the Template Recompiler Tool.

Let me know if you are still having this issue after taking the steps I mentioned. You should also view this article if your site was taken over for a list of steps to clean up the mess.

[TheLiarMask]

A few things to try: re-upload all the vBulletin files except for install/install.php, overwritting the files on your server. Go to Admin CP -> Styles & Templates -> Download / Upload Styles and click "Import" at the bottom to re-import the master style. Run the Template Recompiler Tool.

Let me know if you are still having this issue after taking the steps I mentioned. You should also view this article if your site was taken over for a list of steps to clean up the mess.

Thank you.
i tried it but it is still not works.. help?

[Hartmut]

How did hacking your forum look like? What happened?

[Lynne]

Run Maintenance > Diagnostics > Suspect File Versions - are any files showing as Not Found or Not Containing Expect Contents?

Are you using a backup of your database from before you got hacked? If not, what did you do to make sure they had not actually hacked your database in anyway?

[TheLiarMask]

How did hacking your forum look like? What happened?

the hacked done inside the DATABASE, so i backed up to younder database

- - - Updated - - -

Run Maintenance > Diagnostics > Suspect File Versions - are any files showing as Not Found or Not Containing Expect Contents?

Are you using a backup of your database from before you got hacked? If not, what did you do to make sure they had not actually hacked your database in anyway?

yes i do.
and i just blocked most of the countries IP's.. people from my country will not do bad things

- - - Updated - - -

Run Maintenance > Diagnostics > Suspect File Versions - are any files showing as Not Found or Not Containing Expect Contents?

class_xperience.php
functions_xperience.php

the others:
"

File not recognized as part of vBulletin

"

[Lynne]

Since you used a database backup, did you try running /install/upgrade.php to see if that would fix the issues?

[TheLiarMask]

Since you used a database backup, did you try running /install/upgrade.php to see if that would fix the issues?

i have just tried, still not works

- - - Updated - - -

VERY IMPORTANT!!!
I FOUND OUT THAT WHEN I EDIT POST THAT NOT CONTAIN HEBREW CHARS, ITS WORKS PERFECT.
ANY UNICODE BUG??

[Lynne]

Check Maintnenace > PHP Info.... what version of PHP are you running and what version of PCRE?

[TheLiarMask]

Check Maintnenace > PHP Info.... what version of PHP are you running and what version of PCRE?

PHP Version 5.3.17

PCRE V: 8.21 2011-12-12

But before i backedup the database, evrey thing worked just great, and i dont think my host changed things

[Lynne]

There is a bug in PCRE version 8.21 - http://bugs.exim.org/show_bug.cgi?id=1187. You will need to contact your host and have them downgrade to PCRE version 8.20. Or, alternately, if you have server access, you may see this thread about steps to take - http://forums.cpanel.net/f5/need-dow...-a-257991.html I believe this is a cause of the issue since I have seen it before.

[TheLiarMask]

There is a bug in PCRE version 8.21 - http://bugs.exim.org/show_bug.cgi?id=1187. You will need to contact your host and have them downgrade to PCRE version 8.20. Or, alternately, if you have server access, you may see this thread about steps to take - http://forums.cpanel.net/f5/need-dow...-a-257991.html I believe this is a cause of the issue since I have seen it before.

They said it's not the PCRE's version and i understand them.. because the forum allready worked with this version. any other ideas?

[Lynne]

So you got hacked and then uploaded a database backup to use - correct? And how old was that database backup? Was it created on the same server?

Have you tried disabling your modifications/plugins and see if you still have this problem.Note: To temporarily disable the plugin system, edit includes/config.php and add this line right under <?php

define('DISABLE_HOOKS', true); 

I would still strongly suggest updating your version of PCRE.

[TheLiarMask]

So you got hacked and then uploaded a database backup to use - correct? And how old was that database backup? Was it created on the same server?

Have you tried disabling your modifications/plugins and see if you still have this problem.Note: To temporarily disable the plugin system, edit includes/config.php and add this line right under <?php

define('DISABLE_HOOKS', true); 

I would still strongly suggest updating your version of PCRE.

First, thank you for helping me.
I tried to disable the plugins on both ways, but it wasnt the problem.
and I asked my host to downgrade to 8.2.0 and they said that they can't..

is there anyway to change the unicode of the database?

[Lynne]

If the backup was done on the same server and has the same collation charset as the one you imported it into, then I don't see why you would need to change anything for the database. Was the backup make on this same server/same configuration recently? Did anything change with mysql after you were hacked?