What is at the bottom of my page.

[tylerr82]

I am helping out with a site for friends and I am new to CMS made simple. This ":$cached=discount viagra soft" comes up at the bottom of every single page. How do I get rid of this? What kind of glitch is this? http://www.germanhausbarn.com/cms/ Is the site if you want to look at the source code. Thanks for the help

[Dr.CSS]

Looks like some one was able to get into the root and add it to the index.php...

[staartmees]

first: replace the index.php with a orginal index.php
second: look for some unusual filenames and remove them
third: clear the sitecache

[tylerr82]

Is there any way to do this inside cms? I currently do not have access to the hosting in go daddy. If I did get access, how would I replace the file, I know nothing about this program. Thank you for all the help.

[staartmees]

yeah right Godaddy nope you must have ftp-access or access to the filesystem.

[tylerr82]

I would understand if this was a link, but what is the point of someone breaking in to add this?

[Rolf]

I would understand if this was a link, but what is the point of someone breaking in to add this?

You will know for sure when you check the content of the index.php file...

[tylerr82]

Dr. CSS pointed out in another thread how to get access to the root. I can now see my index page and I looked at the source code and it looks the same. It is on every single page so why would the index page make the difference? I am still a novice so if it is a dumb question I apologize.

[Jo Morg]

Dr. CSS pointed out in another thread how to get access to the root. I can now see my index page and I looked at the source code and it looks the same. It is on every single page so why would the index page make the difference? I am still a novice so if it is a dumb question I apologize.

Yeah, it does make a difference as index.php IS the entry point to all CMSMS sites. That basically means that whatever may be at the end of this file (or anywhere else if the hacker knows what he is doing) will be present on ALL pages....
Most hackers, knowing this attack all index.* files.

[tylerr82]

I looked at the index file in the root, and the code is the exact same. Would the index page in here look any different then the index page that would show up in the actual hosting account?

[Dr.CSS]

CMS Made Simple using index.php in the [root] to pull the parts of a page together into the pages you see in the front end, if you were to hack it and put HELLO WORLD at the bottom of it every page would show HELLO WORLD just as your site shows that bit of text at the bottom...

[tylerr82]

If I posted the source code from the index.php do you think you would be able to tell me what I need to remove? I am used to all text being in tags and there are no tags around that phrase.

[staartmees]

see when your index.php has been changed and look for files and maps that have been changed/created on the same date. Don't start messing around in your index.php, just upload the original index.php.

[tylerr82]

The problem I have is I have none of the original files, I didn't make the site. Is there a way to create the file again and upload it?

[staartmees]

You can download these files form http://www.cmsmadesimple.org