The Joomla! Forum ™

Download

Demo


Board index » Joomla! Older Version Support » Joomla! 1.5 » Security in Joomla! 1.5

Forum rules


Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Security Checklist
Forum Post Assistant - If you are serious about wanting help, you will use this tool to help you post.



Post new topic Reply to topic  Page 1 of 1
  [ 3 posts ] 
  Print view Previous topic | Next topic 
Author Message
kietht
PostPosted: Wed May 02, 2012 4:03 am 
User avatar
Joomla! Apprentice
Joomla! Apprentice

Joined: Thu Jun 28, 2007 3:10 am
Posts: 9
Location: Viet Nam
My website has been hacked and hacker set content of index.php to [Mod: some hacker credit text]:

Mod: [Removed hacker credits - not necessary for resolution of issue]


- I have contacted hosting support to restore the website but I not sure my website will not be hacked again in the future. My site in joomla ver 1.5.25.


Last edited by mandville on Wed May 02, 2012 8:38 am, edited 2 times in total.
Mod removed hacker kudos per forum rules.


Top
 Profile  
 
euoceo
PostPosted: Wed May 02, 2012 4:07 am 
User avatar
Joomla! Guru
Joomla! Guru

Joined: Fri Sep 12, 2008 2:48 pm
Posts: 948
Location: Sacramento
For your reading...

http://docs.joomla.org/Security_Checklist_7

http://docs.joomla.org/Category:Security_Checklist

http://magazine.joomla.org/topics/item/ ... ets-hacked

http://www.itoctopus.com/10-reasons-why ... got-hacked

_________________
Joomla! Web Hosting, Design, and Consulting.
Portfolio: http://www.calweb.com/joomla
Please do not PM me for help, use the forums first.
Top
 Profile  
 
PhilD
PostPosted: Wed May 02, 2012 5:57 am 
User avatar
Joomla! Hero
Joomla! Hero

Joined: Sat Oct 21, 2006 10:20 pm
Posts: 2693
Location: Wisconsin USA
Your site has been hacked so take time and follow what I am including below to properly clean and repair your website.

PhilD wrote:

It is suggested to do all of the following. Failure to follow the suggestions below may leave your site vulnerable to being hacked again in the future.

You must state what version of Joomla you were using when when the site became hacked. This can make a difference as to how we approach your individual situation.

[ ] Run the Forum Post Assistant / FPA Instructions available here and are also included in the download package.

[ ] Ensure you have the latest version of Joomla. Delete all files in your Joomla installation, saving a copy of the configuration.php file. Replace the deleted files with fresh copies of a current full version of Joomla (minus the installation directory), and fresh copies of extensions and templates used. Upload the copy of your configuration file. Only by replacing all files in the installation (including extensions and templates) can you be sure to remove the backdoors inserted and hidden in files and directories More detail can be found in the security Checklist 7 link below.

[ ] Review Vulnerable Extensions List

[ ] Review and action Security Checklist 7 to make sure you've gone through all of the steps.

[ ] Scan all machines with FTP, Joomla super admin, and Joomla admin access for malware, virus, trojans, spyware, etc.

[ ] Change all passwords and if possible user names for the website host control panel and your Joomla site.

[ ] Use proper permissions on files and directories. They should never be 777, ideal is 644 and 755 and 444 for the configuration.php file.

[ ] Check your htaccess for for any odd code (i.e. code which is not in the standard htaccess supplied as part of the Joomla installation).

[ ] Check the crontab or Task Scheduler for unexpected jobs/tasks.

[ ] Ensure you do not have anonymous ftp enabled

Note: The forum post tool will work with 1.0.x, J1.6.x, J1.7.x, 2.5.x versions of Joomla.

_________________
PhilD -- Unrequested PM's and/or emails may not get a response.
Security Moderator
Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 1 of 1
  [ 3 posts ] 


Board index » Joomla! Older Version Support » Joomla! 1.5 » Security in Joomla! 1.5

Who is online

Users browsing this forum: Lucio71 and 10 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  
Powered by phpBB® Forum Software © phpBB Group