Joomla Site Hacked

drewinc · 01-12-2008, 01:01 PM

Our Joomla site was hacked last night --- The admin password, and the index.php were altered.

I have reset the admin password and restored the index.php so the site is now working.

I am running on J1.5.5 (I know my own fault) but now when I try and update to J1.5.8 i get the following error..

Warning: require_once(/var/www/administrator/includes/framework.php) [function.require-once]: failed to open stream: Permission denied in /var/www/administrator/index.php on line 22

Fatal error: require_once() [function.require]: Failed opening required '/var/www/administrator/includes/framework.php' (include_path='.:/usr/share/php:/usr/share/pear') in /var/www/administrator/index.php on line 22

Any Ideas what is causing this ? I have now put it back to J1.5.5 and left the site offline.

thanks in advance

Drew

powdarrmonkey · 01-12-2008, 01:03 PM

Can you paste a chunk from the top of your index.php? It is is including a file that's not in the right place.

Geoff · 01-12-2008, 01:06 PM

The permissions on '/var/www/administrator/includes/framework.php' are incorrect, make sure your webserver can read/execute the file. Or the file is misisng/corrupt.

drewinc · 01-12-2008, 01:11 PM

Its definately permissions,,,, Im not FTPing the files , It is running on a Ubuntu server and the files Im copying accross do not have the correct permissions set.

Ill have a go at changing the permissions and get back ,

thanks for the prompt replies.

drewinc · 01-12-2008, 01:30 PM

Ok changing some permissions now allows me in the backend ,,, the front is giving other permission problems.

Is there a way I can set all the permissions correctly via terminal on the Ubuntu server so I dont have to change these files individually ( Im a total Linux newbie ).

wesleyw · 01-12-2008, 01:35 PM

Quick way would be at www go up a level and type chmod -R 755 <foldername> you could then change permissions for files and folders that need other permissions individually.

Wes

Edu-IT · 01-12-2008, 03:12 PM

Slightly related, I'm running version 1.5.3 of the package. I take it that I am fine to upgrade to the latest version from the Joomla site?

SYSMAN_MK · 01-12-2008, 03:16 PM

Yes and I would update ASAP!

drewinc · 01-12-2008, 03:21 PM

Everything is working fine now -- thanks for the replies. The site is now running 1.5.8 -- just need to check all the file permissions but all seems good.

Edu-IT · 01-12-2008, 03:24 PM

Quote:

Originally Posted by SYSMAN_MK

Yes and I would update ASAP!

I will do it tonight when I get home. It's on a private development server which nobody knows the address of so I think I'm alright to wait until this evening.

Welcome, Register for free! or Login below:
User Name		Remember Me?
Password

01-12-2008, 01:01 PM	#1
drewinc Join Date: Apr 2007 Location: Surrey Posts: 33 Thanks: 2 Thanked 0 Times in 0 Posts Rep Power: 0	Joomla Site Hacked Our Joomla site was hacked last night --- The admin password, and the index.php were altered. I have reset the admin password and restored the index.php so the site is now working. I am running on J1.5.5 (I know my own fault) but now when I try and update to J1.5.8 i get the following error.. Warning: require_once(/var/www/administrator/includes/framework.php) [function.require-once]: failed to open stream: Permission denied in /var/www/administrator/index.php on line 22 Fatal error: require_once() [function.require]: Failed opening required '/var/www/administrator/includes/framework.php' (include_path='.:/usr/share/php:/usr/share/pear') in /var/www/administrator/index.php on line 22 Any Ideas what is causing this ? I have now put it back to J1.5.5 and left the site offline. thanks in advance Drew

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
My joomla site 1.5 has been done over as well!	reggiep	EduGeek Joomla 1.5 Package	9	07-10-2008 10:27 AM
Our school website (with edugeek joomla package) HACKED	dhasmet	EduGeek Joomla 1.5 Package	21	06-10-2008 10:11 AM
Our Joolma site has been hacked	mullet_man	EduGeek Joomla 1.0 Package	9	07-09-2008 09:56 AM
Joomla Download Site Down !!!	ICTNUT	Web Development	0	06-09-2008 04:28 PM

Thread Tools	Search Thread
Show Printable Version Email this Page	Search Thread: Advanced Search

		EduGeek.net Forums > EduGeek Projects > Projects: > EduGeek Joomla 1.5 Package
Joomla Site Hacked

01-12-2008, 01:03 PM	#2
powdarrmonkey Join Date: Feb 2008 Location: Alcester, Warwickshire Posts: 1,199 Thanks: 59 Thanked 118 Times in 96 Posts Rep Power: 26	Can you paste a chunk from the top of your index.php? It is is including a file that's not in the right place.

01-12-2008, 01:06 PM	#3
Geoff Join Date: Jun 2005 Location: Fylde, Lancs, UK. Posts: 9,931 Thanks: 42 Thanked 230 Times in 209 Posts Blog Entries: 1 Rep Power: 67	The permissions on '/var/www/administrator/includes/framework.php' are incorrect, make sure your webserver can read/execute the file. Or the file is misisng/corrupt.

01-12-2008, 01:11 PM	#4
drewinc Join Date: Apr 2007 Location: Surrey Posts: 33 Thanks: 2 Thanked 0 Times in 0 Posts Rep Power: 0	Its definately permissions,,,, Im not FTPing the files , It is running on a Ubuntu server and the files Im copying accross do not have the correct permissions set. Ill have a go at changing the permissions and get back , thanks for the prompt replies.

01-12-2008, 01:30 PM	#5
drewinc Join Date: Apr 2007 Location: Surrey Posts: 33 Thanks: 2 Thanked 0 Times in 0 Posts Rep Power: 0	Ok changing some permissions now allows me in the backend ,,, the front is giving other permission problems. Is there a way I can set all the permissions correctly via terminal on the Ubuntu server so I dont have to change these files individually ( Im a total Linux newbie ).

01-12-2008, 01:35 PM	#6
wesleyw Join Date: Dec 2005 Location: Walsall Posts: 1,252 Thanks: 27 Thanked 6 Times in 5 Posts Rep Power: 10	Quick way would be at www go up a level and type chmod -R 755 <foldername> you could then change permissions for files and folders that need other permissions individually. Wes

01-12-2008, 03:12 PM	#7
Edu-IT Join Date: Nov 2007 Posts: 1,335 Thanks: 65 Thanked 37 Times in 34 Posts Rep Power: 13	Slightly related, I'm running version 1.5.3 of the package. I take it that I am fine to upgrade to the latest version from the Joomla site?

01-12-2008, 03:16 PM	#8
SYSMAN_MK Join Date: Sep 2005 Location: Milton Keynes Posts: 1,985 Thanks: 53 Thanked 223 Times in 158 Posts Blog Entries: 6 Rep Power: 51	Yes and I would update ASAP!

01-12-2008, 03:21 PM	#9
drewinc Join Date: Apr 2007 Location: Surrey Posts: 33 Thanks: 2 Thanked 0 Times in 0 Posts Rep Power: 0	Everything is working fine now -- thanks for the replies. The site is now running 1.5.8 -- just need to check all the file permissions but all seems good.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Register now for FREE and post messages!
Username: Password: Confirm Password: E-Mail: Confirm E-Mail: Birthday: Image Verification I agree to forum rules