Jump to content


Corporate Sponsors


Latest News: (loading..)

Rubin Remus

Member Since 27 Apr 2009
Offline Last Active Dec 15 2011, 13:24
-----

Posts I've Made

In Topic: Feels like my website is being hacked...

15 December 2011, 13:27

View Postgeoffreywalton, on 15 December 2011, 12:20, said:

You could check the date time of the files to see if any others were created at the same time. HTH G

I did that previously. There was nothing that stood out. No files edited since I last did a little work on it a few months back.

This made me think that it must be something previously included.

The answer is above. Thanks for your input though!

In Topic: Feels like my website is being hacked...

15 December 2011, 13:26

Okay. I was totally wrong about the Javascript code. Removing it did nothing...

HOWEVER, I have found the file and the include causing the problem.

Take a look at index.php and look for this:

  require('includes/application_top.php');
  @include("./stats.php");

It's the stats.php line causing this. Remove that, and then remove the file.

It appears to be linking to www.netanalytic.com - and if you visit it, you see exactly what's appearing on your website.

It's been ages since I built this site, so it's possible that www.netanalytic.com was something I used and included previously (but I doubt it)...

In Topic: Feels like my website is being hacked...

15 December 2011, 10:59

Similar problem for one of my clients websites.

I think the backend and database of the site is untouched. I've previously implemented some pretty tight security there.

That said, and I could be wrong here, it appears the issue is coming from /includes/general.js.

Take a look at the bottom of that file and see if there's a load of junk there. I'll be deleting it soon, but I'm just making a full site backup first.

I also looked at the source code, and above the header page there is a comment which reads: <!-- 2lpw1 -->

I'll be doing a sitewide search for that once I've got the full backup done.

Let me know how you get on, and I'll do likewise. I've only noticed this issue today, and my customer hasn't even mentioned it to me yet, so I would think it's only about 48 hours old.

Google had enough time to cache it though, in the wee hours of this morning...

In Topic: Automatically send data feed to Froogle

11 October 2011, 12:13

Thanks Jack. I've set it all up since I posted. I've created the MPN and UPC fields in the product page (though they're not displayed publicly). The feed pulls the information from the fields correctly and that works fine.

Is there anything else I should be aware of that I may have missed?

My sincerest thanks go to you and everybody else who has contributed to this great... contribution.

In Topic: Automatically send data feed to Froogle

11 October 2011, 10:56

Hi,

Sorry if I sound like a complete idiot, but it may be the case.

I've installed this, but I'm having trouble working out the configuration for MPN. Where exactly does it get the codes from? Presumably they need to be put in manually in the admin side somewhere, but I'm not sure how to go about this. I would have expected an SQL update would be required with this script?

Any help from anyone would be much appreciated!