Site getting hacked

This topic contains 4 replies, has 3 voices, and was last updated by  kevintodler 9 years, 2 months ago.

We have moved to a support ticketing system and our forums are now closed.

Open Support Ticket

Tagged: 

  • Author
    Posts
  • February 19, 2015 at 12:52 pm #31379

    kevintodler
    Free User
    Post count: 48

    Hi Geodirectory Team,
    Recently my client site got hacked .

    Browser reported red warning page while accessing site from the browser.

    Here is a conversation from hosting support team.

    “Your site has been found infected in the same WordPress theme as you can see below:

    /public_html/wp-content/themes/geodir_gdf-modern/networks.php
    /public_html/wp-content/themes/geodir_gdf-modern/opt.php

    The red page you’re seeing is not from us but specific from the browser that is getting that information most of the times from Google, as your site has been reported as hacked.

    I’d strongly recommend you first to get rid of that geodir_gdf-modern theme first and run an antivirus on your account’s files so you can discard other infections. If that site can be build from scratch, that would be the best as at this point we don’t really know how affected it can be.”

    Could you please give me an idea what went wrong here?

    February 19, 2015 at 1:09 pm #31380

    kevintodler
    Free User
    Post count: 48
    This reply has been marked as private.
    February 19, 2015 at 1:33 pm #31386

    Stiofan O’Connor
    Site Admin
    Post count: 22956

    Firstly Kevin, if you are going to claim GDF child theme has a vulnerability (claim removed), you sure as hell better have proof!

    The files your host mention are not part of the child theme and must have been put there somehow. The child theme includes no upload functionality at all, i would suggest you or your host look at server logs to when that file was put there and from what source it was put there.

    February 19, 2015 at 2:39 pm #31409

    Paolo
    Site Admin
    Post count: 31206

    Let’s be serious, did you give this guys any credit? A child theme with basically only css… how can that be vulnerable…

    February 19, 2015 at 5:42 pm #31443

    kevintodler
    Free User
    Post count: 48

    Hi Stiofan,
    I had already informed the client about the files not being related to Geodirectory in any way.

    But anyway I posted here as requested by client to gain feedback about the cause of the error.

    I will inform the client and check to see how those files came up.

    @paolo we did not give any credit to these guys, just waited for your feedback.

    Thanks

    Kevin

  • Author
    Posts
Viewing 5 posts - 1 through 5 (of 5 total)

We have moved to a support ticketing system and our forums are now closed.

Open Support Ticket