Looks like my host upgraded my theme framework (Genesis) without my permission, I’m guessing that’s what’s triggered this problem.

odd. not sure what the interaction there would be…  let us know what you find…

Host said nothing about the Genesis update should have caused a problem

There should be no correlation between these as the updated file had a single line that was improperly escaped. The addition of the “escaping” is simply a cleansing feature IF someone were to inject something bad. It would not impact current functionality especially if you were already on 1.8.

Quick update on the issue, I had my server roll back the Genesis update, I reinstalled the forums, made sure all the permissions were working as normal, then I updated Genesis theme framework and all is good.. so I have NO Idea what happened but it sure was scary to have all the private sections on my forum suddenly available to the public so if you have any idea whatsoever what could have possibly ’caused this to happen please do let me know!

no clue really…  never had anything happen like that…  assume you had checked the permissions?

reinstalled the forum??  that would lose your data… do you just mean you reactivated it?

to be safe, I would run a check of your server and make sure it hasnt been hacked…

Yeah, I had checked the permissions, they hadn’t changed

I mean reloaded all the forum files

No signs whatsoever of the forums having been hacked, and my hosts security settings are overly strict so it’s unlikely anything has slipped by us.

It’s all still working fine so … *shrugs*

One thing I would say is that during any updating process – be it theme, plugins or whatever – there is always a small window of instability where the likelihood that code will break is extremely high. Someone accessing a site that has half an update applied and is in the process of applying the other half could lead to issues. I am a firm believer in the use of plugins like ‘Maintenance Mode’ to restrict access during any update. And SP itself, as you will know, will not load itself when an update is in progress.

For security sake, be sure your wp-config.php permissions are set at 400. Read only for the owner.

If someone can read your config file they might gain access to your database.

Also be sure your db log in and pw are not the same as your admin log in.

Double checked wp-config just to be sure, it’s all good LOL

Would ANYONE use the same login details for their DB as for WP? really? LOL

FidoSysop, thanks for the suggestion. love it when the community tries to help each other!

Tal said
Double checked wp-config just to be sure, it’s all good LOL

Would ANYONE use the same login details for their DB as for WP? really? LOL

Hehehe.. I DID once upon a time, before i learned better.