Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

noob here... I paid someone to find out why my joomla site was slowing down and exceeding bandwidth etc.

They told me that I was experiencing an sql injection attack through my RSS feed, they did some work on my site that I don't understand that was supposed to block or slow down the problem. I don't think its working.

Can anyone point me a tutorial or tell me what tools a noob my start with to analyze my site/server?

share|improve this question
add comment

2 Answers 2

Take down any scripts which may contain exploitable code to prevent further abuse immediately. A malicious user who has enumerated an SQL injection vulnerability has his foot in the door to cause some serious problems for your site and you're asking for trouble if you are working to fix the problem while the exploit remains available.

Once you have secured your site, you can audit questionable code to patch the issue - look for any mysql_query() or mysqli_query() calls which include variables which are not wrapped in mysql_real_escape_string() or mysqli_real_escape_string() calls (ideally, you'll replace these calls with prepared statements using bound parameters).

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.