4

I received a call from Go Daddy indicating that my site had been hacked and the .htaccess file is now an issue.

The code in my .htaccess file is as follows

RewriteEngine On

RewriteCond %{HTTP_USER_AGENT} (google|yahoo|msn|aol|bing) [OR]
RewriteCond %{HTTP_REFERER} (google|yahoo|msn|aol|bing)
RewriteRule ^([^/]*)/$ /help-insideit.php?p=$1 [L]

AddType application/octet-stream .gdb .gpx

Could someone advise me as to what could be corrupted?

Improve this question
4
  • 4
    It's not so much "corrupt" as it is "hijacked". You've likely got a PHP file named help-insideit.php somewhere in your directories (maybe several), and this .htaccess file is rewriting requests (visits) from Google, Yahoo, MSN, etc... to that file. They're likely trying to redirect traffic from your site to theirs. I'd suggest working with GoDaddy's hosting support department for help locating and removing those PHP file(s) and resetting the .htaccess file to what you previously had (or just empty it if nothing was in there before).
    – dan ♦
    Commented Sep 21, 2017 at 6:54
  • 2
    You should also change your passwords for your account access, FTP, and SSH... See the bottom of their help guide here: Lock down a compromised account.
    – dan ♦
    Commented Sep 21, 2017 at 6:58
  • You need to address how they got in... otherwise it'll just happen again and again. Time to check all logs.
    – Simon Hayter
    Commented Sep 21, 2017 at 11:02
  • Curious that the only relevant results in Google for help-insideit.php relate to two hacked sites from two years ago - also on GoDaddy! (Although the actual filename may be insignificant here, hence only two results.)
    – MrWhite
    Commented Sep 21, 2017 at 12:37

1 Answer 1

Reset to default
1

you need to do a few things to fix the issue.

  1. Change your FTP password, you need a strong password.

  2. Remove the three lines starting with 'RewriteCond' and 'RewriteRule' in your htaccess file.

  3. Delete the file 'help-insideit.php' from your server.

As commented above contact GoDaddy's hosting support department if you need help with it.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.