SOLVED Anyone Else hacked on NYE?
-
-
- beyud
- Sr. Rocketeer
- Posts: 185
- Thanks: 4
-
I'm sorry to say that our site was hacked on NYE. It looks like they just deleted about three files, but it might be impossible for me to find out what damage was actually done. Anyone have thoughts.
They deleted CMS.php from libraries and sessions.php from libraries/joomla/sessions. I restored those files from an older backup. Any tips would be helpful as well.
I'm also looking to see if anyone has any tips for securing my site. i was thinking about possibly removing the joomla conact forms to cut down on bots. But I'm also looking at Abeka Admin tools if that helps. I was reading that from OS training.
Happy New Year!
-
-
-
- DanG
- Preeminent Rocketeer
- Posts: 36750
- Thanks: 3229
- Custom work done
-
Sorry to hear that
Admin Tools is Awesome! Contact forms still can be used but look on JED for Form extensions that have really good cleaning of a users input.
This may help you a lot " A Super Fast Way to Clean a Hacked Joomla Website "
GOOD LUCK!
This image is hidden for guests.
Please log in or register to see it.
-
-
-
- beyud
- Sr. Rocketeer
- Posts: 185
- Thanks: 4
-
I finally got around to setting up Admin Tools and tried the free version beacuse I'm cheap like that. Anyway, I heard that some templates are not compatible with the password protection of the administration. I set a password and after I set the password I get an error 404 so I had to go in and delete the .htxxx files in the administrator folder to gain access again.
Any ideas?
-
-
-
- Matt
- Preeminent Rocketeer
- Posts: 22254
- Thanks: 3223
- messin' with stuff
-
Do you have Joomla Caching enabled? Could just be that you needed to flush your cache... our template's don't muck with the login stuff in any way... Be sure your Joomla is up to date as well.
To keep Joomla secure keep it up to date... pay attention to releases and note any that are a security release and be sure and update immediately. Keeping your PHP library up to date (5.6+) is equally important to keeping your site secure. - SEARCH the forum first! These boards are rich in knowledge and vast in topics. This includes searching just the 'Solved' forums, using Google, and using ChatGPT
-
-
-
- beyud
- Sr. Rocketeer
- Posts: 185
- Thanks: 4
- I flushed out the cache in Gantry and Joomla, but it still doesn't like it. Does SEF URLs have anything to do with it? I'm going to try it on another site that I have to see if the same result happens.
-
-
-
- DanG
- Preeminent Rocketeer
- Posts: 36750
- Thanks: 3229
- Custom work done
-
beyud wrote:
I flushed out the cache in Gantry and Joomla, but it still doesn't like it. Does SEF URLs have anything to do with it? I'm going to try it on another site that I have to see if the same result happens.
Not really as they just format your links to be human readable so instead of
mysite.com/index.php?option=com_content&view=article&id=42&catid=1
you get
mysite.com/component/content/article/1-category/42-meaning-of-life
-
Time to create page: 0.056 seconds