Page 1 of 1
Why: .../admin/index.php?_sx_=9d7c5ecd
Posted: Sat Jan 09, 2016 4:23 pm
by burlington
This is related to my posting:
http://forum.cmsmadesimple.org/viewtopi ... 28&t=74060
If I try to login to .../admin now, I get:
.../admin/index.php?_sx_=9d7c5ecd
Frankly, I really don't know where to go from here, apart from ditching the whole damn site and starting from fresh with the latest CMSMS version and a clean server.
Any advice would be appreciated please. For the record, whatever I do on this site is for free.
Thanks
Martin
Re: Why: .../admin/index.php?_sx_=9d7c5ecd
Posted: Sat Jan 09, 2016 4:33 pm
by Jo Morg
burlington wrote:If I try to login to .../admin now, I get:
.../admin/index.php?_sx_=9d7c5ecd
That in itself doesn't say much...
However
_sx_= does hold the session id in some versions of CMSMS and is a valid parameter.
Re: Why: .../admin/index.php?_sx_=9d7c5ecd
Posted: Sat Jan 09, 2016 7:20 pm
by Dr.CSS
Are you saying you get that in the URL and can't do anything in the admin or ?..
Re: Why: .../admin/index.php?_sx_=9d7c5ecd
Posted: Sat Jan 09, 2016 7:47 pm
by burlington
Dr.CSS wrote:Are you saying you get that in the URL and can't do anything in the admin or ?..
I just can't get in to admin.
Re: Why: .../admin/index.php?_sx_=9d7c5ecd
Posted: Mon Jan 11, 2016 9:49 am
by burlington
This is all that happens, and there is no access to the login facility.
Re: Why: .../admin/index.php?_sx_=9d7c5ecd
Posted: Mon Jan 11, 2016 6:45 pm
by Dr.CSS
If you go to yoursite.com/admin/login.php and don't see the login inputs or get a 400 no such page error then someone renamed the admin folder or they hosed the site...
[SOLVED]Re: Why: .../admin/index.php?_sx_=9d7c5ecd
Posted: Mon Jan 11, 2016 9:25 pm
by burlington
Thank you everyone for you help. The problem has now been solved, I hope.
My website host got on to the issue and he wrote:
<quote>
I've just analyzed your error_log (which is quite large whilst filled with a single error, and I shall remove it), and it seems that one folder the CMS was trying to access had no permissions (public_html/uploads/images/dump).
</quote>
The hacker seems to have had a great time and my opinion of the hosting company has gone up by leaps and bounds.
Again, than you.
ps the same sort of lettering still appears at login but I can now get in!
Re: Why: .../admin/index.php?_sx_=9d7c5ecd
Posted: Thu Jan 14, 2016 5:04 pm
by Jeff
burlington wrote:
If I try to login to .../admin now, I get:
.../admin/index.php?_sx_=9d7c5ecd
For anyone else reading this, if you get to ".../admin/index.php?..." you are already logged in, if you aren't seeing anything that you can do it is either because your user doesn't have any permissions or that there is an error that is preventing the page from loading.