User File Emptied

Discussion regarding Joomla! 3.x security issues.

Moderators: Bernard T, mandville, PhilD, fcoulter, General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Forum Post Assistant / FPA - If you are serious about wanting help, you will use this tool to help you post.
Post Reply
kkurtz
Joomla! Apprentice
Joomla! Apprentice
Posts: 17
Joined: Thu Jul 12, 2012 1:38 pm

User File Emptied

Post by kkurtz » Wed Feb 14, 2018 2:09 pm

Several times a week my user file gets spontaneously emptied. I can look at the file in myphpadmin and there is nothing in it. This happens without my entering, changing, or deleting users. I am able to restore the site but this shouldn't be happening.
Can someone please help.

KKurtz
Last edited by toivo on Wed Feb 14, 2018 3:11 pm, edited 1 time in total.
Reason: mod note: moved to 3.x Security

User avatar
AMurray
Joomla! Virtuoso
Joomla! Virtuoso
Posts: 4061
Joined: Sat Feb 13, 2010 7:35 am
Location: Australia

Re: User File Emptied

Post by AMurray » Thu Feb 15, 2018 9:51 pm

What do you mean "user file" (do you mean the database?) I'm not familiar with the term "user file" in the context of joomla websites.

Are you meaning the #_users table or the #_session table (which is temporary, and deletion of records is usually expected when a user logs out).

Please explain in more detail what you mean. Can you see a list of your users in the User Manager in Joomla administrator?
Regards,
--------------------------------------------------------------
A Murray
Millennium Falcon - it's the ship that made the Kessel run in less than 12 parsecs! The fastest hunk of junk in the galaxy.

kkurtz
Joomla! Apprentice
Joomla! Apprentice
Posts: 17
Joined: Thu Jul 12, 2012 1:38 pm

Re: User File Emptied

Post by kkurtz » Fri Feb 16, 2018 12:55 am

I mean the #_users table. I can't see the list of users in the User Manager because whatever this is deletes my Super User credentials and I can't login. Sometimes it wipes out the entire table and other times one or two users remain. I know this because I can go into the phpmyadmin and see what is in the file. However, I can't seem to insert a new super user row in the table in the phpmyadmin.
Regards,
K Kurtz

User avatar
AMurray
Joomla! Virtuoso
Joomla! Virtuoso
Posts: 4061
Joined: Sat Feb 13, 2010 7:35 am
Location: Australia

Re: User File Emptied

Post by AMurray » Sat Feb 17, 2018 11:04 pm

OK that sounds very strange but I can't comment or suggest anything further as that's beyond my knowledge.

The best thing I could advise is to run a scan of your site with the very excellent myjoomla.com service. It's a subscription based service, but the first scan is free.
Regards,
--------------------------------------------------------------
A Murray
Millennium Falcon - it's the ship that made the Kessel run in less than 12 parsecs! The fastest hunk of junk in the galaxy.

User avatar
Per Yngve Berg
Joomla! Master
Joomla! Master
Posts: 24991
Joined: Mon Oct 27, 2008 9:27 pm
Location: Akershus, Norway

Re: User File Emptied

Post by Per Yngve Berg » Sun Feb 18, 2018 7:49 am

In phpmyadmin, run the command to repair the database table.

User avatar
brian
Joomla! Master
Joomla! Master
Posts: 11724
Joined: Fri Aug 12, 2005 7:19 am
Location: Leeds, UK
Contact:

Re: User File Emptied

Post by brian » Sun Feb 18, 2018 8:54 am

You have been hacked. No question about that
"Exploited yesterday... Hacked tomorrow"
Blog http://brian.teeman.net/
Joomla Hidden Secrets http://hiddenjoomlasecrets.com/


Post Reply

Return to “Security in Joomla! 3.x”