Atypical Lost Admin Problem

[ramam]

Hey there,

Today I can't login. I didn't forget my admin password. I know it is right. In any case , figuring a solar flare hit the right sectors on my hosters drives I decided to truncate the administrator table (after backing it up) and going through the 'create new admin account' process. That produced a row in the administrator table and when I went to log in right away using the user/pass it fails the same way using the previous user/pass failed ( Error: Invalid administrator login attempt).

 

Any ideas?

 

I've poked around and it doesn't really look like anything has changed but clearly something has... I could use a hand.

thanks

BTW I"m using OSC 2.2 RC2 and the server reports PHP 5.2.13, my entire store seems to work perfectly aside from not being able to access the admin site anymore :(

[vishalchauhan]

1) Make sure that you are using the same database link in configure file, the database which you are changing(truncated)

 

2) If database is same then check your login page which use encryption function to validate password

 

3) Make sure there is no mistake in enter password like small , capital words and numbers

 

4) Is there any space, underscore, special characters in the password?

 

at the last

 

replace your old password with this " $P$DV6NEveNMWpy/ujZeM3r7PCk0Qdpom/ " this password, it define " admin " (for osc 2.3.1)

 

Please take backup of you current administrators table before apply any changes.

 

 

[ramam]

Thanks for the reply,

1) I am using the same DB -> I use the command line interface (mysql) not phpadmin... I'm sure I'm truncating the right table in the right DB

2) I'm not sure what to check in the login page - it's just the stock osc2.2rc2 admin login page that came with my install AFAIK

3) I am certain I did not forget my admin password, I keep it written down, *and* I tried the truncate/create thing several times with no success

4) the password is not so interesting

 

That password format is incorrect for osc2.2rc2. My passwords are of the form md5hash:salt where salt is two hex characters and md5hash is output from md5() of the two salt characters + the plain text password.

 

I did back up the administrator table before trying the truncate trick the first time.

I'm starting to think me (or the hoster) am compromised... any suggestions here?

 

thanks