ExpressionEngine CMS
Open, Free, Amazing

Thread

This is an archived forum and the content is probably no longer relevant, but is provided here for posterity.

The active forums are here.

Website pages displaying Spam - have I been hacked?

February 05, 2011 2:44pm

Subscribe [5]
  • #16 / Feb 11, 2011 1:18pm

    Lisa Wess

    20502 posts

    Hi, Linda,

    The files impacted were the root index.php and two files were added to system/modules/pages.

    There’s no way to advise on how to prevent this without knowing exactly how the hackers got into your system.  It is possible that they didn’t hack your site directly, but came in through a script on another user’s account.

    The only way to know is to email your host and ask them to help how the hackers got in; this should also alert them to the security issue.  If you get no help from them; then honestly? I’d recommend another host.  EngineHosting comes to mind - and security is very important to them. =)

  • #17 / Feb 11, 2011 2:47pm

    mountain monkey

    23 posts

    Thanks for the advice Lisa, I appreciate it.

    My site has been hosted by Dreamhost for over 10 years and luckily, never had a security problem before. It’s a vicious circle though, the host blames third party and third party blames the host. I really don’t want to shut down my site because of this, but at the same time I don’t want my website blacklisted by search engines because of the spam. As I mentioned above, when I Bing.com my website address the description for my website is Spam related; “Buy cialis professioanl online | Top Canadian Online Pharmacy…, and I have no idea how to undo that damage.

    Good to hear from you again Lisa, hope you’ve been well.

    Linda

  • #18 / Feb 11, 2011 3:03pm

    Lisa Wess

    20502 posts

    Linda, I’m not blaming the host.  I’m just saying that the host is the only one able to access the information that we need to figure out how these whippersnappers gained access to modify your files.

    Once we have the information from the host, we can go from there.  =)

  • #19 / Feb 11, 2011 3:21pm

    mountain monkey

    23 posts

    Ok, thanks Lisa. I just fired off an email to them now.

    Linda

  • #20 / Feb 11, 2011 4:24pm

    Sue Crocker

    26054 posts

    Sounds good, let us know what you find out. We’ll be here.

.(JavaScript must be enabled to view this email address)

ExpressionEngine News!

#eecms, #events, #releases