Phishing

For all Non-Joomla! security issues. ie 3pd Components etc.

Moderator: General Support Moderators

Forum rules
Locked
peterf
Joomla! Intern
Joomla! Intern
Posts: 87
Joined: Sat Sep 10, 2005 8:23 am

Phishing

Post by peterf » Sat Jan 27, 2007 8:11 pm

Hello!
someone has put some files into my website under the item called component. I got an e-mail from a bank that there were something called "phishing" from my webiste. I toke the files away, they there called "update" and they appearently sending something out to the bank...

Do anyone know how to prevent that this is happening?... Im using mabo 4.5.3.
-hope to her something!
regards from
Peter Frandsen
Denmark

User avatar
infograf768
Joomla! Master
Joomla! Master
Posts: 19133
Joined: Fri Aug 12, 2005 3:47 pm
Location: **Translation Matters**

Re: Phishing

Post by infograf768 » Sun Jan 28, 2007 7:06 am

You are using Mambo.
These are Joomla forums.

Joomla 1.0.12 is quite safe.

For all security information (some are also good for any CMS), look at the stickies
http://forum.joomla.org/index.php/topic,76551.0.html
Jean-Marie Simonet / infograf
---------------------------------
ex-Joomla Translation Coordination Team • ex-Joomla! Production Working Group

peterf
Joomla! Intern
Joomla! Intern
Posts: 87
Joined: Sat Sep 10, 2005 8:23 am

Re: Phishing

Post by peterf » Mon Jan 29, 2007 11:11 am

thanks for your advice...

I read the links you gave me and ended to put a line in the file "extcalendar.php"
I put the sentence in the beginning af the file (will you confirm if I am on the "right track", I am very new working with programming). regards Peter from Denmark:

<?php
defined('_VALID_MOS') or die('Direct Access to this location is not allowed.');
/*
**********************************************
ExtCalendar v2
Copyright (c) 2003-2005 Mohamed Moujami (Simo)
v1 originally written by Kristof De Jaeger
**********************************************
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.
**********************************************
$File: extcalendar.php - Calendar view display$

File adapted from the file "calendar.php" in the original
ExtCalendar v2 software. Renamed and adapted to become a Mambo
Server component by Matthew Friedman.

Revision date: 5/22/2005

**********************************************
Get the latest version of ExtCalendar at:
http://extcal.sourceforge.net//
**********************************************
*/
global $mosConfig_absolute_path;


and so on...

Joomaboom
Joomla! Intern
Joomla! Intern
Posts: 73
Joined: Fri Sep 02, 2005 4:19 pm

Re: Phishing

Post by Joomaboom » Mon Jan 29, 2007 2:13 pm

You might have a few unsafe programs running, mambo 4.5.3 will likely need to be upgraded. You need to go to this forum. They also have in depth knowledge of the extcalendar component.  http://forum.mambo-foundation.org/index.php


Locked

Return to “3rd Party/Non Joomla! Security Issues”