The Joomla! Forum ™

Download

Demo


Board index » Joomla! Older Version Support » Joomla! 1.5 » Security in Joomla! 1.5

Forum rules


Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Security Checklist
Forum Post Assistant - If you are serious about wanting help, you will use this tool to help you post.



Post new topic Reply to topic  Page 1 of 1
  [ 18 posts ] 
  Print view Previous topic | Next topic 
Author Message
Shellbell21
PostPosted: Wed Apr 25, 2012 5:43 pm 
Joomla! Apprentice
Joomla! Apprentice

Joined: Fri Jan 20, 2012 4:07 pm
Posts: 18
Hey, I'm trying to open a swf file on my joomla website. but a blank box appears, the website name is http://www. imgmit .com/index.php?option=com_content&view=article&id=48&Itemid=57. I have previously been able to but a swf file in, but when I changed it, it stopped working.


Last edited by ooffick on Wed Apr 25, 2012 9:35 pm, edited 1 time in total.
Mod Note: Broke link


Top
 Profile  
 
Webdongle
PostPosted: Wed Apr 25, 2012 5:51 pm 
User avatar
Joomla! Master
Joomla! Master

Joined: Sat Apr 05, 2008 9:58 pm
Posts: 23363
Location: @Webdongle
You've been hacked
Attachment:
Capture 213.PNG


Also you have been pasting from MSword directly into the Articles


You do not have the required permissions to view the files attached to this post.

_________________
http://weblinksonline.co.uk/joomla-faq.html
Top
 Profile  
 
Shellbell21
PostPosted: Wed Apr 25, 2012 5:54 pm 
Joomla! Apprentice
Joomla! Apprentice

Joined: Fri Jan 20, 2012 4:07 pm
Posts: 18
Oh god,what should I do?
Top
 Profile  
 
euoceo
PostPosted: Wed Apr 25, 2012 5:58 pm 
User avatar
Joomla! Guru
Joomla! Guru

Joined: Fri Sep 12, 2008 2:48 pm
Posts: 948
Location: Sacramento
@WebDongle; While hacked do you think that is preventing the flash from running? Odd though, when I went to the page, I didn't get any browser popups/warnings. I use the site to check my stuff all the time, I've seen false-positives now and then and will usually check with one alternate source here: http://www.urlvoid.com/scan/imgmit.com/

Checked with several engines and all say fine.

---
Anyways, what did you change specifically? I went to that link and saw the flash loading bar, but when it was done loading, went to a broken image. Take a look at this tutorial for embedding flash, there looks to be a couple of differences from the way you are doing it. Maybe okay, but something to try differently.

http://animation.about.com/od/flashanim ... ebpage.htm

_________________
Joomla! Web Hosting, Design, and Consulting.
Portfolio: http://www.calweb.com/joomla
Please do not PM me for help, use the forums first.
Top
 Profile  
 
euoceo
PostPosted: Wed Apr 25, 2012 6:00 pm 
User avatar
Joomla! Guru
Joomla! Guru

Joined: Fri Sep 12, 2008 2:48 pm
Posts: 948
Location: Sacramento
Where did you get your template from? That link could be just the template people trying to count how many times it is being used. If that's not disclosed in the template then shame on them. Find where that code is and remove it if that is the only thing being reported as suspicious.

Edit: Tag line says Artisteer template. I'm very familiar with that package, all my websites start with that. Maybe it's a module you've installed? Or if you did not design the template yourself, as I said it could be where it came from.

_________________
Joomla! Web Hosting, Design, and Consulting.
Portfolio: http://www.calweb.com/joomla
Please do not PM me for help, use the forums first.
Top
 Profile  
 
Shellbell21
PostPosted: Wed Apr 25, 2012 6:12 pm 
Joomla! Apprentice
Joomla! Apprentice

Joined: Fri Jan 20, 2012 4:07 pm
Posts: 18
Yes I designed it using Artisteer. I changed the swf file, because I was putting an updated version in. I have done this before, and it loaded fine. Its my final year project in college, and it is due friday, so now im gettin really worried.
Top
 Profile  
 
Shellbell21
PostPosted: Wed Apr 25, 2012 6:13 pm 
Joomla! Apprentice
Joomla! Apprentice

Joined: Fri Jan 20, 2012 4:07 pm
Posts: 18
Also, I got a message from my hosting site saying that there servers have been hacked, maybe its to do with that. The hacking that is, not the swf file. Would it be worth transferring to another hosting site.
Top
 Profile  
 
Webdongle
PostPosted: Wed Apr 25, 2012 6:36 pm 
User avatar
Joomla! Master
Joomla! Master

Joined: Sat Apr 05, 2008 9:58 pm
Posts: 23363
Location: @Webdongle
If you transfer the site to another Host and its been compromised then all you are doing is transferring the hack to another server.

The link that sucuriscan is complaining about is showing clean but empty. Could be a false positive because the javascript is pulling in a blank page ?

Do you have any backups ? What format are any backups in ... .jpa ?

Did you develop on your PC and then move to the server ?

_________________
http://weblinksonline.co.uk/joomla-faq.html
Top
 Profile  
 
Shellbell21
PostPosted: Wed Apr 25, 2012 6:39 pm 
Joomla! Apprentice
Joomla! Apprentice

Joined: Fri Jan 20, 2012 4:07 pm
Posts: 18
Ok thanks for letting me know, I wont transfer the files! At this stage im just worried bout the swf file at the moment. I did bulid it original on the PC, and transferred onto a server, about 3 mths ago. I dont have any back ups. Stupid me
Top
 Profile  
 
euoceo
PostPosted: Wed Apr 25, 2012 6:41 pm 
User avatar
Joomla! Guru
Joomla! Guru

Joined: Fri Sep 12, 2008 2:48 pm
Posts: 948
Location: Sacramento
That would be quite discerning to the say the least. We use apache with suphp mod, so each customer runs at their own permission level. To get hacked at the server level that could affect all the website's security would be something at the root login level and very serious and not a happy day for host's admins!

_________________
Joomla! Web Hosting, Design, and Consulting.
Portfolio: http://www.calweb.com/joomla
Please do not PM me for help, use the forums first.
Top
 Profile  
 
euoceo
PostPosted: Wed Apr 25, 2012 6:47 pm 
User avatar
Joomla! Guru
Joomla! Guru

Joined: Fri Sep 12, 2008 2:48 pm
Posts: 948
Location: Sacramento
Make sure you uploaded your swf with a binary transfer and not ascii or it'll get corrupted.

_________________
Joomla! Web Hosting, Design, and Consulting.
Portfolio: http://www.calweb.com/joomla
Please do not PM me for help, use the forums first.
Top
 Profile  
 
Shellbell21
PostPosted: Wed Apr 25, 2012 6:49 pm 
Joomla! Apprentice
Joomla! Apprentice

Joined: Fri Jan 20, 2012 4:07 pm
Posts: 18
I know will sound stupid, but could you explain more? Is it not weird, how it used to work but now it wont.
Top
 Profile  
 
euoceo
PostPosted: Wed Apr 25, 2012 6:55 pm 
User avatar
Joomla! Guru
Joomla! Guru

Joined: Fri Sep 12, 2008 2:48 pm
Posts: 948
Location: Sacramento
When you FTP something, there are 2 modes of transfering, binary and ascii. Usually binary is default or auto. The other day I had a customer that had corrupt image files, his Filezilla was somehow set to ascii instead of auto, he supects and update broke it, but also around the same time he was infected with malware too. Make sure your FTP app is using binary or auto.

Also, since that script is in the index file, you can try regenerating your artisteer template and reuploading it, that way at least your template files are set to a known level. I don't think your hack is as bad as other's I seen with injected malware code, if it's just that script file then it is easy to remove. It looks like something keeping track of stats for hosting24.com, is this your host?

_________________
Joomla! Web Hosting, Design, and Consulting.
Portfolio: http://www.calweb.com/joomla
Please do not PM me for help, use the forums first.
Top
 Profile  
 
Shellbell21
PostPosted: Wed Apr 25, 2012 7:04 pm 
Joomla! Apprentice
Joomla! Apprentice

Joined: Fri Jan 20, 2012 4:07 pm
Posts: 18
Have checked that, seems ok! I embedded the swf through the article.Do you think using an extension to embed would help, and if so can you recommend any?
Top
 Profile  
 
Shellbell21
PostPosted: Wed Apr 25, 2012 7:08 pm 
Joomla! Apprentice
Joomla! Apprentice

Joined: Fri Jan 20, 2012 4:07 pm
Posts: 18
I was also told to change my ftp password aswell, to try prevent hacking, I just did it there.
Top
 Profile  
 
euoceo
PostPosted: Wed Apr 25, 2012 7:12 pm 
User avatar
Joomla! Guru
Joomla! Guru

Joined: Fri Sep 12, 2008 2:48 pm
Posts: 948
Location: Sacramento
Embedding in the article via tags, should be fine since it's worked fine in the past. Another to check, how long ago was it that you were notified of that server hack? Is it possible it's been rebuilt already from scratch and some of the configs were not setup. Such as .swf types in the config file. You could email them and tell them swf are broken and see if there is something they've done on their side that they are not aware of. How big is the swf? I could try running it one of my test sites for you. PM me info you'd like me to try that.

_________________
Joomla! Web Hosting, Design, and Consulting.
Portfolio: http://www.calweb.com/joomla
Please do not PM me for help, use the forums first.
Top
 Profile  
 
euoceo
PostPosted: Wed Apr 25, 2012 7:14 pm 
User avatar
Joomla! Guru
Joomla! Guru

Joined: Fri Sep 12, 2008 2:48 pm
Posts: 948
Location: Sacramento
Did you change something, that area is displaying your swf now!

Edit: whoops back to blank... And now this error:

The server is too busy at the moment.

Please reload this page few seconds later.
----
I'd being leaning toward your host now with all these odd problems when your site was fine before!

_________________
Joomla! Web Hosting, Design, and Consulting.
Portfolio: http://www.calweb.com/joomla
Please do not PM me for help, use the forums first.
Top
 Profile  
 
mandville
PostPosted: Sat Apr 28, 2012 7:43 am 
User avatar
Joomla! Master
Joomla! Master

Joined: Mon Mar 20, 2006 1:56 am
Posts: 11706
Location: The Girly Side of Joomla in Sussex
one of the big issues is the "host" you are using. they are a known rouble host if i posted zero_zero_zero_webhost url here, it would be filtered by the bad word sensor.

_________________
HU2HY- Poor questions = Poor answer
Un requested Help PM's will be added to the foe list and possibly just deleted
{Community.Connect Administrator }{ Showcase & Security Moderator}
Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 1 of 1
  [ 18 posts ] 


Board index » Joomla! Older Version Support » Joomla! 1.5 » Security in Joomla! 1.5

Who is online

Users browsing this forum: No registered users and 40 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  
Powered by phpBB® Forum Software © phpBB Group