Hacked UPDATE

[craig2006]

Update: I have since reloaded my 1.5.6. Changed all passwords and access to Administrator. Infact, best thing to do, it create another super admin, and delete the original admin. A good trick from a couple of suggestions from users. Thanks


My site got hacked also. Just noticed this this morning. I also notice many all of a sudden around the world are having hack issues. the Config file was changed. I was using 1.5.4. and going to upgrade soon, but never previously had a problem.

How would the Config file be changed? How can I prevent this?

[adamos46]

chmod 444 configuration.php if you are using linux or through your sftp client change it to 444

[ircmaxell]

I was using 1.5.4. and going to upgrade soon, but never previously had a problem.

And you wonder why you got hacked? Tip: When you see a critical security release announced, don't "plan" to upgrade... UPGRADE...

[craig2006]

definitely.

[craig2006]

Adamos, where is ? - chmod - ? not sure what this is/located.

[orware]

In your FTP program, just right-click on the configuration.php file and choose Properties and then it will have a 3x3 grid where you can select the read, write, and execute permissions and it should also have a box where you can type in the exact permissions right away. The text box is where you type in 444.

[adamos46]

If you have ssh type it in the correct path or edit it with sftp to make it 444. Or move you configuration.php outside your joomla root directory

[craig2006]

Right. It is best to have all the attributes checked? Or just 'read'. Does it default to that setting? Write was checked and 444 illustrated.