marcusdesign

Hi all,

I've chmod'ed every file in includes/languages/dutch to 644 and I've not been hacked again !

for me this does the trick !

marcus

Hi all,

For now the following files are affected everytime the hack-script has been run:

languages/dutch/index.php
languages/dutch/checkout_success.php
languages/dutch/expected_products.php
languages/dutch/cursus_lijst.php (my own page)
languages/dutch/tell_my_friends_success.php (my own page)
languages/dutch/recently_viewed.php
languages/dutch/help_shipping.php (my own page)
and
languages/dutch/activities.php (my own page)

It just happened again: all these eight files were changed and rewritten with the code in it !

It must be something which has been installed on the website or so, because I'm working on the file permissions the whole afternoon, trying to set everthing right.

Marcus

Hi everybody,

My site also has been hacked by someone. After googling something I came up with this site: http://sucuri.net/malware/malware-entry-mwjs1240

It explains that ALL osCommerce websites could be affected.

So for everyone: be aware.

At my site, eight language files were rewritten with the code explained on the website above. This happend three time for the last two weeks. Last night at 22.26h and the night before at 21.26h. The first time I didn't pay any attention to the time that this happend. I just wanted to get my site running up again...

For now I've included a .htaccess file in my includes/languages/dutch folder hoping that this could be a trigger to stop this annoyance !

I've downloaded a couple of images from an Austrian website (www.wollerei.at) and (must be coincidence..) after that time my site has been hacked. I don't know if this is the problem. Hope to see this tomorrow morning because today I've put the .htaccess file in the folder. If this doesn't work, maybe the images of that website are the problem...

Greetings,
Marcus

Hi Chris,

I've tried to remove manually the rows in the database table and could create a new administrator, but then I got the problem that the new login information doesn't get saved well in the database.
The username is left blank and only the password is entered. So I've tried to ligin using only a password but still remains the same problem.

Marcus

Hi,

I've got the same problem when trying to run the just new installed oscommerce 2.3.1 ! After using the install/- procedure everything is fine. In the database all tables are created and in the administrator-table the right user and password are inserted which I've entered during installation.

but after installation and trying to login for the first time, osCommerce gives the following error:

Error: Invalid administrator login attempt.

How's that possible?

MarcusDesign