Website security checks

[mdrabble]

It has recently come to my attention that when searching for our school website, google has placed "This site may have been hacked" next to our search result.

 

I've gone through Googles security checks and it reports back as being clear and no malicious code being seen/found. So I'm at a bit of a loss. I've asked Google to re-evaluate our site and I'm waiting to see if anything changes.

 

In the mean time, our webserver is running Centos6 and Joomla 2.5 - so both are out dated and need updating with newer versions.

 

Can anyone recommend any sites which can check for malicious code/sql injections etc.

 

 

Cheers

Mark

[danbuntu]

What's the point version of your joomla site? the latest is 2.5.28 - if you're below this version might that be what's flagging it up?

[mdrabble]

Currently running Joomla version 2.5.20 and is being reported as the latest version (according to the admin interface)

 

Looking at the Joomla website, support for 2.5 ended December 2014 which is why I was saying it is outdated.

[GTX]

I would suggest wiping the server and installing this:

 

CentOS Web Panel | Free Linux Web Hosting Control Panel

 

Helps alot but the main thing is, CSF firewall is installed with the web GUI. On the web GUI it will give you information on weaknesses on your box. Ports open.. blah blah blah

 

It even has brute force auto ban. Anyone tries to get into you box and fails over say... 5 times. Will get their IP black listed to that box.

 

I think CSF has saved my arse enough times. You can install CSF without Centos panel but its a pain to get the GUI working at times.

 

ConfigServer Security & Firewall

 

Best of all.. Its all free

 

GTX

[bicky]

+1 for CSF and its free