forum spider to create backups?

[Lakie]

A long long shot I know.

Play an online game and am part of the alliance, the guy that paid for the alliance forums went inactive and noone can get to the database. While the hosting is good for another year or so were trying to see if we can get a rough copy of the forums just incase...

Does anyone know of a forum crawler that you can let loose and it spiders it and creates the equivalent of a sql dump for any of the common fourm boards thatyll work on ipb??

Yeah, I know, its a longshot, but the only thing I can think of, and I had no idea only one person was able to get the db, either through hosting control or though forum, so no loling at me! Alliance yes, but not me

[IcIshoot]

which forum software do they use? some forums give the administrators the ability to make a backup of the database in the administration panel - such as SMF


I don't know of any crawler, though it is a cool idea

[Lakie]

ipb, there is an inbuilt backup, but the only level of admin that has that ability has gone inactive...

[Scott]

That would be extremly hard to create, i've never herd of such software... Your best bet is probably to try and hack into the forums..If, for example, you can get access to the file system via ftp you can get the sql username/password and then find the phpmyadmin system that your host uses. You can also try to login remotly to the mysql server to get a backup.

How are message attachments stored with ipb? If files are stored within the file system and you have access to change what type of files you can attach to a message via the forums acp you can set it to allow php files and upload (via attach) a php file that uses the readfile() or similar function to read the contents of the config file. From there you can use php to create a dump and then download the file. I've actually done that before ...

[atholon]

I think Scott's right.

IPB has tons of security flaws anyway depending on the version.... that is why I stopped using it.

[Lakie]

Thakyou SQL injections and brute forcing!

Tried the attachment thing, go figurerthe upload directory isnt chmod right so cant use it lol

[Scott]

So did you get a copy of the db then?

[Lakie]

the machines are still brute forcing the salt and hash, but yea when that happens I will have as ill be able to log in as root admin...

[Lakie]

and im in

Thanks for the help all..

[Steve]

haha nice hax

[SilentTrigger]

Congratulations mike!