11
votes
Accepted
Was user-agent identification used for some scripting attack techique?
This is a Joomla 0 Day Attack. Information found here: https://blog.sucuri.net/2015/12/remote-command-execution-vulnerability-in-joomla.html
This is not a vulnerability test despite the __test. It is ...
- 32.6k
5
votes
Accepted
Whats the use of mysql.safe_mode in php.ini file?
To use safe_mode, set your database host, username and password in php.ini using the configuration parameters:
sql.safe_mode = On
mysqli.default_host = "127.0.0.1"
mysqli.default_port = "3306"
mysqli....
- 2,953
5
votes
Accepted
A new database user for every database?
Rule number 1... never ever share passwords
Sharing username and passwords is considered a bad practice, should it be for internet banking, social media or SQL databases, never use the same password ...
- 32.6k
4
votes
Accepted
Can Joomla and Wordpress use same MySQL database?
Can I use the same MySQL database which is being used for joomla site?
Of course. There is no technical reason why you can't. As long as there is no conflict in table names, which as you noted can be ...
- 85.8k
4
votes
Someone trying to attack my Joomla website with many different IP's
All the answers suggested I would do as well. If you want another level of security I would enable Apache Basic Authentication
http://httpd.apache.org/docs/current/howto/auth.html
with a username/...
- 141
4
votes
Was user-agent identification used for some scripting attack techique?
The IP address that you linked does not resolve to a Google hostname therefore it is not Google. The person or bot is scanning your site for vulnerabilities. The first one is attempting to find a ...
- 32.6k
4
votes
Website is redirected to scam site only when clicking from Google search results
How could someone facilitate this?
Compromising any part of the PHP/Joomla/Plugin code could be enough to implement such a redirect.
However, these attacks are commonly achieved by writing malicious ...
- 41.6k
3
votes
Should we modify our Joomla robots.txt after Google's announcement on crawling of CSS and JavaScript?
Honestly you are better off removing everything from your robots.txt. As far as I can see, all PHP files in Joomla contain the line
defined('_JEXEC') or die;
Which means if you load a PHP file ...
- 21.4k
3
votes
Accepted
Suspicious script loads ONLY when navigating to site via search engines
Your web server contains a configuration file with a configuration that directs traffic from certain sources to pages with the suspicious script.
If you're using apache, start with the .htaccess ...
- 13.5k
3
votes
Accepted
Why do some Nginx configurations block download agents using Wget?
User agent wget
Blocking the user agent wget will block operating systems that use wget to download files within the terminal i.e Linux, MacOS, Arm etc. This will block every file from being ...
- 32.6k
3
votes
Someone trying to attack my Joomla website with many different IP's
So, it's the same old story.
But, first, there are few things to do:
Firstly, scan your site with some antivirus tool. Then do this:
Upgrade all components/plugins
Upgrade your Joomla on latest ...
- 3,858
3
votes
Website is redirected to scam site only when clicking from Google search results
There are a lot of places where a little tiny code can be implemented that does the job!
Here are my suggested steps to take towards fixing the issue:
You may find out where is that code exactly ...
- 181
2
votes
Best way to optimize joomla cache. Difference between Global configuration cache and system cache plugin
As I understand it, the global settings version caches the views and parameters of components and modules, rather than the content. This means that if you change the content, then the change will be ...
- 1,925
2
votes
Joomla jUpgrade stops at "Migrating undefined"
The process of migrating Joomla 1.5 to 2.5 is often a complex process, depending on what extensions you have on your current website. It's seldom a one-click process.
First of all, make sure you have ...
- 121
2
votes
Accepted
Why do I see requests from BOT/0.1 (BOT for JCE) in my server access log and what should I do about them?
Yes, this bot is trying to exploit JCE. It’s probably using a very powerful publicly available exploit (+ mirror) for JCE < 2.0.11. Although this is a really outdated version, many instances are ...
- 232
2
votes
Revamped Joomla site to Google search engine
I'd probably run a crawler to collect all the URLs of your 1.5 site (a sitemap generator, or link checker should do this for you).
When the site is live, Joomla 2.5 has a redirect manager (under ...
- 1,925
2
votes
Should we modify our Joomla robots.txt after Google's announcement on crawling of CSS and JavaScript?
In Joomla 3.3, these lines have been removed from the robots.txt file :
Disallow: /templates/
Disallow: /media/
More info here : http://www.energizethemes.com/blog/joomla/have-you-updated-the-joomla-...
- 125
2
votes
Should we modify our Joomla robots.txt after Google's announcement on crawling of CSS and JavaScript?
Apart from the overall use/lack thereof, of robots.txt in a well managed Joomla site, with "good" third party extensions — the only places that should contain CSS, JS or images are:
/images
/media
/...
- 316
2
votes
Accepted
.htaccess: DirectoryIndex and 403 forbidden
The only way to be sure why you are receiving a 403 error is to check the logs. They will tell you the reason why it is forbidden.
The DirectoryIndex itself doesn't create any new rule that would ...
- 635
2
votes
Why my site can run without .htaccess
A site doesn't have to have a .htaccess file. If you don't have a .htaccess file, your site will run on the settings in the apache and PHP server configuration files.
Having your file named ....
- 7,743
2
votes
Why my site can run without .htaccess
Firstly if the file is named htaccess.txt then that means the htaccess file is not enabled as only the file named .htaccess will work.
Secondly if you are getting a 500 error when you enable the ....
- 10.1k
2
votes
Accepted
Clear old SEO content from Joomla
One, two or even a few months sometimes isn't enough time for Google to update its index with changes in a website and start displaying results in the way the website owner is desiring. And it's not ...
- 375
2
votes
Accepted
Add an exception to Joomla's .htaccess rewrite rules to allow an Owncloud subdirectory
RewriteCond %{REQUEST_URI} !^/Joomla3
RewriteRule ^(.*)$ Joomla3/$1 [L]
What these directives do is... if the requested URL does not start "/Joomla3" then internally rewrite the request to the "...
- 41.6k
2
votes
.htaccess: DirectoryIndex and 403 forbidden
Check if your chosen index file (test.html) has the correct permission.
I had the same problem when I uploaded my website files in zip format and then extracted using cPanel. By default, cPanel gave ...
- 251
2
votes
Someone trying to attack my Joomla website with many different IP's
I suggest you scan your whole server to find malicious files inside.
For the site's security, I think you already use Akeeba Admin Tools. If you do then change the administrator url with some random ...
- 121
2
votes
What does the string "";} /*B6D1B1EE*/ ?>" at the top of my Joomla page mean?
For some reason PHP code is being sent to the browser. It may be that PHP is not enabled n that server but that page contains some. It could be short tags are used but the server has not enabled it. ...
- 85.8k
2
votes
Was user-agent identification used for some scripting attack techique?
Additionally to other answers, note that the fact that this attack apparently worked suggests you are running an old, insecure version of PHP. A fix for the bug that this attack exploits was released ...
- 131
2
votes
Accepted
Joomla Meta Title "reset to default"
Your SERP link looks fine from here...
It is likely that you are hitting a set of servers that are not up to date yet. Just be patient. It will all work out okay.
- 32.6k
2
votes
Joomla Website Creating Automatic Unwanted Subdomains
The issue that you are having is in relation to cPanel and your web host. Typically a default install of a cPanel hosting account will setup various services that can be accessed by your domain. Often ...
- 32.6k
Only top scored, non community-wiki answers of a minimum length are eligible