XOOPS 
Forum
Forum Index General Forums Community Support Modules Support Themes Support Development International Support Module Hack Reviews Theme Designer Talk
  1. Board index / 
  2. XOOPS Community Support forums / 
  3. Q and A 
  4.  / My Xoops site has been hacked! How do I fix it?
Register
1
codyheit
My Xoops site has been hacked! How do I fix it?

  • 2006/10/24 1:48

  • codyheit

  • Not too shy to talk

  • Posts: 150

  • Since: 2006/1/10


Hi

My XOOPS site has just been hacked and I would like to know how I can fix this. It looks like the hacker has changed all index files (html, php etc) to thier page. What is the main index page that XOOPS users to first load?

Thanks
www.sacotech.com.au
2
zyspec
Re: My Xoops site has been hacked! How do I fix it?

  • 2006/10/24 2:39

  • zyspec

  • Module Developer

  • Posts: 1095

  • Since: 2004/9/21


The first file that normally gets loaded when a user goes to a XOOPS site is /index.php. You may want to check to see if they put an index.htm(l) page in your directory. Many servers will execute an .htm(l) document before a .php document.

You will need to try and figure out how they got into your server or it will happen again. Repairing the files won't be sufficient to stop them from repeating the 'attack'.
3
codyheit
Re: My Xoops site has been hacked! How do I fix it?

  • 2006/10/24 3:06

  • codyheit

  • Not too shy to talk

  • Posts: 150

  • Since: 2006/1/10


Thanks for the reply.

My hosting company and made changes to the server so it shouldn't happen again.

I have checked the main index.php file and replaced it with the default index.php. I have also checked for an index.html in this page and can't see one. So I have gone around to nearlly every index file I can find and uploaded the default index file over the top.

Unfortunalty it still hasn't fixed the problem.

Any other ideas?

P.S Here is the link:

http://www.sacotech.com.au/Extranet/
www.sacotech.com.au
4
codyheit
Re: My Xoops site has been hacked! How do I fix it?

  • 2006/10/24 11:34

  • codyheit

  • Not too shy to talk

  • Posts: 150

  • Since: 2006/1/10


Any ideas on how to fix this issue as I can't seem to work out how to fix it and my site has been down since saturday (4 days)?
www.sacotech.com.au
5
m0nty
Re: My Xoops site has been hacked! How do I fix it?

  • 2006/10/24 11:48

  • m0nty

  • XOOPS is my life!

  • Posts: 3337

  • Since: 2003/10/24


empty the contents out of templates_c except for index.html

also clear the cache folder aswell..
6
kaotik
Re: My Xoops site has been hacked! How do I fix it?

  • 2006/10/24 11:55

  • kaotik

  • Just can't stay away

  • Posts: 861

  • Since: 2004/2/19


The current site is running joomla. Did you temporarily replace XOOPS for joomla?
www.kaotik.biz
7
codyheit
Re: My Xoops site has been hacked! How do I fix it?

  • 2006/10/24 12:08

  • codyheit

  • Not too shy to talk

  • Posts: 150

  • Since: 2006/1/10


Have done but no luck.
www.sacotech.com.au
8
codyheit
Re: My Xoops site has been hacked! How do I fix it?

  • 2006/10/24 12:10

  • codyheit

  • Not too shy to talk

  • Posts: 150

  • Since: 2006/1/10


It isn't running joomla but I noticed that not only were the index files hacked but also the main files so I began replacing these with the default xoop main files and now when I try to go to the site it redirects to the page not found (Which is another site of mine which uses joomla)

Any ideas why it might have done this?
www.sacotech.com.au
9
codyheit
Re: My Xoops site has been hacked! How do I fix it?

  • 2006/10/24 12:11

  • codyheit

  • Not too shy to talk

  • Posts: 150

  • Since: 2006/1/10


.
www.sacotech.com.au
10
Arowana
Re: My Xoops site has been hacked! How do I fix it?

  • 2006/10/24 14:31

  • Arowana

  • Friend of XOOPS

  • Posts: 323

  • Since: 2004/8/6 2


well what I did awhile ago when something like this happened was get the same version of XOOPS and the modules then upload it all over again but do NOT replace config.php and you should be good. If this does not work then ask your host to restore from a back up. although most hosts say they dont back things up they really do.

Hope this helps
Arowana
(1) 2 »

Login

Register now!  |  Lost Password?

Search

Advanced Search

Recent Posts

Who's Online

148 user(s) are online (84 user(s) are browsing Support Forums)

Members: 0

Guests: 148

more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: May 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits