OJS password is changed by phishing attack

[abadan]

Can I add username and password with an admin privilege through the database

Please see:

Changing a site administrator

Hi @Evandro_Souza, Check what the user group ID of your administrators group is by running: SELECT user_group_id FROM user_groups WHERE context_id=0 AND role_id=1; It’ll probably give you a 1 back as a result. Then, you can grant that to your user: INSERT INTO user_user_groups (user_id, user_group_id) VALUES (1234, 1); …where 1234 is your user ID, and 1 is the user_group_id you got from the first query (probably a 1). Regards, Alec Smecher Public Knowledge Project Team

And update to OJS 3.3.0-21 LTS to get all security and known defect fixes.