Page 1 of 1
Re: I think my CMS Made Simple has been hacked
Posted: Wed Jan 11, 2012 4:08 pm
by staartmees
replace the index.php on the server with the original one.
Re: I think my CMS Made Simple has been hacked
Posted: Thu Jan 12, 2012 12:47 pm
by manuel
It also can't hurt to download a copy of your website files and use a program to compare them to the files of a fresh cmsms install. (use the same version of the fresh install you are using!)
Personally, i like freecommander for comparing files...
Also download a copy of your mysql db and search for "iframe", "porn", ... in it, manually clean it out and restore the db.
Greetings,
Manuel
Re: I think my CMS Made Simple has been hacked
Posted: Thu Jan 12, 2012 2:43 pm
by manuel
Damn, that's looking nasty!
I would set up a fresh install of the latest version of cmsms and manually recreate your website using all the latest versions of the modules you used.
You can use cgcontentutils to export/import your page tree (if there's no filth in your page content), that should save you some time
http://dev.cmsmadesimple.org/projects/cgcontentutils
This way you can be sure there's absolutely no trace left of the hack...
Greetings,
Manuel