0
votes
1answer
143 views

Many of joomla websites on my server have been hacked; no other kind of website [duplicate]

Today I got that many of Joomla websites on my server are hacked. Some of the hacked joomlas were updated (the last version from 2.5 series) with the last version. In many cases, the main index.php ...
-2
votes
2answers
46 views

Recommended UNIX user for CMS access to MySQL [closed]

This article recommends the UNIX nobody user to access MySQL from Joomla scripts. Is this standard practice? Moreover, is it reasonable to use it, say, both for Joomla and WordPress?
1
vote
1answer
465 views

How insecure are 775 permissions on Joomla core folders?

I recently uploaded a site with all folders set to -755 permissions and files to -644 permissions. But Joomla tells me "unwritable" for all folders listed under Directory Permissions. Now I changed ...
2
votes
5answers
2k views

Finding out who hacked my site [duplicate]

Possible Duplicate: My server's been hacked EMERGENCY All Joomla! sites hosted on a single server of mine were hacked and had the following code injected into the index.php files ...
2
votes
3answers
2k views

.htaccess to deny access to most xml files

I recently had a Joomla site hacked, so I'm trying to harden the site a bit. There's a section in the recommended .htaccess that restricts outside access to the xml files that come with extensions. ...
4
votes
4answers
3k views

Site Hacked Using ?cmd=ls

A Joomla site I'm running was hacked the other day. The hacker dropped some files into the tmp directory and was running an HTTP Daemon there somehow (at least that's what my host told me). At any ...
2
votes
6answers
978 views

How can I audit a Linux filesystem for files which have been changed or added within a specific timeframe?

We are a website design/hosting company running several sites and someone was able to write arbitrary data to the file system. We suspect that they still have some scripts installed and need a way to ...