Seven Joomla Sites HACKED over the last two weeks %(

For all Non-Joomla! security issues. ie 3pd Components etc.

Moderator: General Support Moderators

Forum rules
Locked
User avatar
DesignDog
Joomla! Apprentice
Joomla! Apprentice
Posts: 19
Joined: Tue Jul 25, 2006 12:12 am
Location: L.A.
Contact:

Seven Joomla Sites HACKED over the last two weeks %(

Post by DesignDog » Tue Jul 25, 2006 1:09 am

About a week ago I had seven Joomla sites hacked.

They all inherited a dysfunctional parse error from nonorescaped quotes I think.


Parse error: syntax error, unexpected T_STRING, expecting ')'

They all showed some sort of parse error like this on different pages.

I dont think this is a hosting problem. I thought it was at first.

Is there a decent way to fix the parse errors or is it just best to start over??


After I did some research, I believe I got hacked because I had BSQSiteStats installed?? not totally sure though.
I didnt have anything installed like gigCalendar or anything. Is there a def way to find out?

Anyone can shed a little light on this and maybe a few cents on how to prevent it or how I can find out exactly how I got hacked or any comment relating to the parse error???

I know that the 1.10 stable helps this a lot which I did upgrade half of them but...

ALSO anyone have a good simple step by step on how to recompose a new site from a NEW INSTALL?

thanks!
Last edited by DesignDog on Tue Jul 25, 2006 1:17 am, edited 1 time in total.
"I don't know crap, I just have to do this stuff everyday!"

User avatar
brad
Joomla! Master
Joomla! Master
Posts: 13272
Joined: Fri Aug 12, 2005 12:38 am
Location: Australia
Contact:

Re: Seven Joomla Sites HACKED over the last two weeks %(

Post by brad » Tue Jul 25, 2006 1:28 am

Please see: http://forum.joomla.org/index.php/topic,79477.0.html
and: http://forum.joomla.org/index.php/topic,76551.0.html

These are all stickies in the 3rd Party Security Forum, where I am moving this thread to now.


Locked

Return to “3rd Party/Non Joomla! Security Issues”