+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 22
EduGeek Joomla 1.5 Package Thread, Our school website (with edugeek joomla package) HACKED in Projects:; Please help Our website is hacked. How could it be? Are there som security problem with 1.5 Joomla package?...
  1. #1

    Join Date
    Jun 2008
    Location
    copenhagen
    Posts
    15
    Thank Post
    16
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Our school website (with edugeek joomla package) HACKED

    Please help

    Our website is hacked. How could it be? Are there som security problem with 1.5 Joomla package?

  2. #2


    Join Date
    Feb 2007
    Location
    Northamptonshire
    Posts
    4,693
    Thank Post
    352
    Thanked 798 Times in 717 Posts
    Rep Power
    347
    We need more information in order to help.

    What exactly has been hacked?
    Is it running linux? (If so, check lastlog for connections to SSH)
    Check your web access logs to see if anything suspicious occured.
    What else does the box have on it? webmin? etc?

  3. Thanks to kmount from:

    dhasmet (5th October 2008)

  4. #3
    Galway's Avatar
    Join Date
    Jun 2007
    Location
    West Yorkshire
    Posts
    1,374
    Thank Post
    9
    Thanked 311 Times in 219 Posts
    Rep Power
    101
    Joomla needs to be up to date to protect yourself against exploits.

    JoomlaCode > Projects > Joomla! > Files > Browse Releases

    Allways keep it up to date, sign up to be notified of updates for joomla and any plugins you are using.

  5. Thanks to Galway from:

    dhasmet (5th October 2008)

  6. #4

    Join Date
    Jun 2008
    Location
    copenhagen
    Posts
    15
    Thank Post
    16
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by kmount View Post
    We need more information in order to help.

    What exactly has been hacked?
    Is it running linux? (If so, check lastlog for connections to SSH)
    Check your web access logs to see if anything suspicious occured.
    What else does the box have on it? webmin? etc?
    I dont now what there has been hacked. When I tasted our site (vesterborgefterskole.dk), I get following message with black background:

    "Hacked By Cw_BadBoOY"

    We dont get any server, so I have build the site on my pc. And the page is hosted by "one.com".

  7. #5

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,941
    Thank Post
    519
    Thanked 2,498 Times in 1,939 Posts
    Blog Entries
    24
    Rep Power
    840
    Ok, a brief search for the attacker turned up http://turk-h.org/defacement/list/fi...borgefterskole and vesterborgefterskole.dk / Turk-h.Org which indicates it was attacked via a domain hack, for the reason of it being a nationalistic attack (ie. they're attacking it simply because they don't like Denmark I think (but then the online translators available for Turkish are a bit limited)). And the method translates as them taking control of your account at one.com (possibly be faking emails to one.com as if they had come from yourself to change the passwords for them, but then as I said before the online translators are limited).

    I'd speak to one.com asap and get them to look at their logs.

  8. Thanks to localzuk from:

    dhasmet (5th October 2008)

  9. #6

    Join Date
    Jun 2008
    Location
    copenhagen
    Posts
    15
    Thank Post
    16
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by localzuk View Post
    Ok, a brief search for the attacker turned up http://turk-h.org/defacement/list/fi...borgefterskole and vesterborgefterskole.dk / Turk-h.Org which indicates it was attacked via a domain hack, for the reason of it being a nationalistic attack (ie. they're attacking it simply because they don't like Denmark I think (but then the online translators available for Turkish are a bit limited)). And the method translates as them taking control of your account at one.com (possibly be faking emails to one.com as if they had come from yourself to change the passwords for them, but then as I said before the online translators are limited).

    I'd speak to one.com asap and get them to look at their logs.
    hmm, but the password was still the same. Do you now how I can set yhe site up again?? Should I install the Joomla package again?

  10. #7

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,092
    Thank Post
    891
    Thanked 1,741 Times in 1,501 Posts
    Blog Entries
    12
    Rep Power
    456
    Can you see your site in FTP?

    your hosting company should be able to restore a backup for you

  11. Thanks to FN-GM from:

    dhasmet (5th October 2008)

  12. #8

    Join Date
    Jun 2008
    Location
    copenhagen
    Posts
    15
    Thank Post
    16
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by FN-GM View Post
    Can you see your site in FTP?

    your hosting company should be able to restore a backup for you
    yes, I have just changed my password and get the backup. What should I do now? Should I install joomla again or can I change some simple things??

  13. #9

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,092
    Thank Post
    891
    Thanked 1,741 Times in 1,501 Posts
    Blog Entries
    12
    Rep Power
    456
    Can you see the site in FTP?

    There is no point doing a new install, if you site is gone the hosting company can bring the old one back from backups

  14. #10

    Join Date
    Jun 2008
    Location
    copenhagen
    Posts
    15
    Thank Post
    16
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by FN-GM View Post
    Can you see the site in FTP?

    There is no point doing a new install, if you site is gone the hosting company can bring the old one back from backups
    I can see all the joomla package, its look like as before. I think, the hacker have only placed a frontpage. If its correkt, how can I erase the frontpage??

  15. #11

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,092
    Thank Post
    891
    Thanked 1,741 Times in 1,501 Posts
    Blog Entries
    12
    Rep Power
    456
    it looks like you might need the index.php file restoring form a backup

  16. Thanks to FN-GM from:

    dhasmet (5th October 2008)

  17. #12

    Join Date
    Jun 2008
    Location
    copenhagen
    Posts
    15
    Thank Post
    16
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by FN-GM View Post
    it looks like you might need the index.php file restoring form a backup
    I did, but it still not working.

  18. #13

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,055
    Thank Post
    624
    Thanked 2,214 Times in 1,015 Posts
    Blog Entries
    23
    Rep Power
    635
    Many ISPs don't do backups. There is simply too much information stored. Unless of course you pay out of the nose for a super dooper hosting package.

  19. #14

    Join Date
    Jun 2008
    Location
    copenhagen
    Posts
    15
    Thank Post
    16
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by FN-GM View Post
    it looks like you might need the index.php file restoring form a backup
    its the "configuration.php". but how du I change it?

  20. #15

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,092
    Thank Post
    891
    Thanked 1,741 Times in 1,501 Posts
    Blog Entries
    12
    Rep Power
    456
    Quote Originally Posted by dhasmet View Post
    its the "configuration.php". but how du I change it?
    Whats wrong with it?

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. How are you using edugeek Joomla Package
    By SimpleSi in forum EduGeek Joomla 1.0 Package
    Replies: 12
    Last Post: 7th July 2008, 08:42 PM
  2. Abbrev for Edugeek Joomla Package
    By SimpleSi in forum EduGeek Joomla 1.0 Package
    Replies: 2
    Last Post: 23rd May 2008, 04:08 PM
  3. [CLOSED] Bug/Error: Edugeek Joomla Package Creator – Where has he gone?
    By FN-GM in forum EduGeek.net Site Problems
    Replies: 4
    Last Post: 31st January 2008, 12:07 AM
  4. Edugeek Joomla package templates
    By gh256 in forum EduGeek Joomla 1.0 Package
    Replies: 1
    Last Post: 13th November 2007, 04:15 PM
  5. School Joomla Package
    By linkazoid in forum Web Development
    Replies: 1
    Last Post: 29th September 2007, 08:53 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •