Help required

[delhidjinn]

My site's front end is working.
Site was hacked.
Now I cannot visit site.com/administrator as it resolves to site.com

I migrated my site to joomla 2.5 on the same site in a site.com/
public_html/joomla17. Even on this site i cannot visit site.com/
joomla17/administrator

Can someone help me? Willing to pay a reasonable cost.

[Francesco Mulassano Gmail]

What do you see on the administrator side?

[Delhi Djinn]

Nothing.
when I put in site.com/administrator it goes back to site.com

--
You received this message because you are subscribed to the Google Groups "Joomla! General Development" group.
To post to this group, send an email to joomla-de...@googlegroups.com.
To unsubscribe from this group, send email to joomla-dev-gene...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/joomla-dev-general?hl=en-GB.

[Francesco Mulassano Gmail]

assuming that the db has not been hacked

Make a backup of everything (site and db)
and then try to overwrite files with the original downloaded from joomla.org

Keep me informed

[Francesco Mulassano Gmail]

first check the index.html :-)

On 02/11/2012 04:16 PM, Delhi Djinn wrote:

[Delhi Djinn]

See only index.php no index.html L

[subtextproductions]

If you're running on a Linux server, try logging in with FTP and see
if you can find the .htaccess. This may be redirecting you away from
the administrator page. If that's the case it's a quick fix just
delete the .htaccess file. Otherwise, as Francesco suggested, start
backing up everything now. If you've been compromised that means they
can get at it again. The most common types of hack will leave a string
of code at the bottom of every PHP page that looks something like
this:

[code]
<?php
eval(base64_decode('87590815fja;lsdfja;lsd98234792172-8sdjkadjfkdjdkfldfj')); ?
>
[/code]

Good Luck!

[Matt Thomas]

One thing you can also do is back up what is live (hacked),  download a copy of it, then restore the live site with a known good backup. Make sure that all of your extensions are up to date and check the VEL (vunerable extensions list) to see if you have any installed. Once you have that backup restored, be sure to change your passwords.

Best,

Matt

Sent from my phone that uses an open source operating system.

[Francesco Mulassano Gmail]

checks if your index.php is different from the original

[Terrance W. Arthur]

index.html?

this is not the right spot for this discussion as you see none of the veterans have responded and the response you got was way off - your hack is symptom not the actual problem or cause.

You can find all the help you need here http://developer.joomla.org/security.html

In the future use Akeeba and the scheduler and you won't have problems like this. You'll be able to go back to a previous working backup.

I look forward to assiting you in any way I can so please don't hesitate to contact me.

Warm regards,

Terry Arthur, Freelance designer & programmer

(800) 669-0729

requirednotices on Skype

Sent from my iPad

[Terrance Arthur]

apologies bad link here's the right one \

http://docs.joomla.org/Category:Security_Checklist

[Terrance Arthur]

HI guys,

I understand you are trying to help but these suggestions are already written up in the link I sent previously and piecemeal is no way to address security. The list is there for a reason. If it had been followed in the first place this discussion would not be necessary.

This thread is this individuals attempt to take another shortcut so you really aren't helping them and this list isn't the right place to ask for help with this since it has nothing to do with development.

This is list is for:

This list relates to general topics about Joomla development, including development of third-party extensions. The types of discussions one might find here could include issues related to creating a router for a new component, or how to use the JForms API introduced in 1.6, or problems migrating a 1.0.x extension to Joomla! 1.5.

The Joomla General Development list is a place for developers in the community to interact with one another, to ask and answer questions, find collaborators on project ideas, and consider how changes in coming versions might impact extensions.

From these discussions, it is hoped that developers might summarize important topics and learning material and share that information with other developers on the Wiki.

I think this means that this list is for discussions that aid Joomla! overall and as a whole not just one installation that wasn't properly managed.

Terry Arthur

[Swapnil Shah]

The security forums are pretty help for this kind of situation.

http://forum.joomla.org/viewforum.php?f=621&sid=ae1878e3ea08f9d06692c7cb1edef159

there is a checklist you should follow and people that hang out there are pretty helpful as well.

good luck