Web Developer, IT Assistant, Graphics design, App Developer
Malware files getting uploaded to Media folder
Posted 12 years 3 months ago
Hi Guys
Hoping someone can help me... ive been getting attacked by alot of malware into my site recently.
Some of which has uploaded files to my Media folder (PHP files, images etc...) and another that managed to insert scripts into all PHP files on my site (all of Joomla).
Ive restored from a backup and from reading into it... i have now password protected the entire Administrator folder so that it needs a password to view the admin login.
I have just logged in today to find a taz.php file added to the media folder again... i have tried to change the folder permissions (which are currently 755) but if i do... it kills some of the site and stops images working and other things.
What are the best permissions for the Media folder? and does anyone know what i can do to protect my media folder from uploads by hackers / bots??
Re: Malware files getting uploaded to Media folder
Posted 12 years 3 months ago
If server is configured correctly, 755 should be good permission. You will really need to contact your hosting company to help you to find out which file is the hole through your attacker get access to the site
Web Developer, IT Assistant, Graphics design, App Developer
Re: Malware files getting uploaded to Media folder
Posted 12 years 3 months ago
Yes i have a ticket open with them at the moment, its very frustrating!
Unfortunately the site is a heavily modified template and has lots of older plugins that dont exist in 2.5 etc...
I will be rebuilding it soon, just wont be anytime in the next 2 months.
Thanks for your reply.