Help - Locked Out - Password Reset Not Working

I'm unable to log in. Customers are unable to access their galleries. Not sure why? What would the steps be to troubleshoot or solve this?

Thanks,

Edited by

Ok so here's how it went down for me -

Client calls me, says I can't get into see my proofs. I thought it was my ssl not working properly so I called Godaddy about that. It seemed like that was the fix. Nope, still acting weird. Then I was unable to login to admin. That's where this support forum submission came from.

Tried to go into Godaddy and look at my CPANEL>MyPhP Admin - got an error there. That shouldn't happen.

Called GoDaddy - Just go straight to tech support they first send you to their sales team to screen you, I guess...it's a little bit of a hassle.

Turns out - I had another wordpress site I was working on about a year ago. There was a contact form on it. About 2 months ago, I started getting spam from the site. I went in changed the email address thinking that would fix the problem. It didn't. I was still getting spam, it wasn't a ton of spam, so I could tolerate so I just let it go.

Bad idea-
If you see any odd activity investigate it.

My File usage exploded (inside Godaddy Cpanel) found out that was a sign of being hacked. Someone is using my email host to spam with, I've got about 1.5 Gb of emails in my Godaddy Account I have to clean up.

So I just deleted the old wordpress files/site, that seemed to clean up myPHPAdmin errors.

After not letting Godaddy skirt the discovery process, they found the problem was coming form sytist. So whoever it was figured out where the admin login file was and did something to it. I removed that file replaced it with an older version and I was able to login to my site. Changed my password.

Not sure if I'm still compromised. I was able to login -

So I think the fact that I didn't have a ReCaptcha on my form might have been the way I let the hacker in. Not sure if it was on Systist or my Wordpress, I'm thinking wordpress was the backdoor.

Edited by