Urgent! Need help getting a Joomla website back from a hack.

Discussion in 'Joomla' started by custard2011, Nov 22, 2011.

  1. #1
    Hi DP...

    I am look for a Joomla developer that would be able to take a look at one of my sites.

    It has recently been hacked with a Facebook Like splash page. Looks like they have created a new index.php file to do it.

    I have removed the splash page but the raw index file is now showing. Need someone to take a look and get the site back live asap.

    Please PM if you think you can help with a quote.

    Many thanks

    Matt
     
    custard2011, Nov 22, 2011 IP
  2. gizmo222

    gizmo222 Peon

    Messages:
    17
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #2
    Hope you have local copies of the files.

    Most simple solution:
    - login via FTP
    - Sort View by modification Date.
    - go through every! folder
    - overwrite the hacked (newly modified files) with the local copies or at least with files from the joomla installation package.

    Later modify .htaccess with:
    ####################################### Against Hacks
    RewriteCond %{QUERY_STRING} (.*)=http(.*)
    RewriteCond %{QUERY_STRING} (.*)action=newfile(.*) [NC]
    RewriteCond %{QUERY_STRING} (.*)action=save(.*) [NC]
    RewriteRule ^(.*) - [F]
     
    gizmo222, Nov 28, 2011 IP