Hot answers tagged

14 votes
Accepted

Google is changing my urls in search results - Joomla3 bug

In your header you have a canonical link (on line 11, just under <title>). It looks like this on your page: <link href="http://escene.ir/component/products/?task=view.12" rel="canonical" /&...
user avatar
  • 291
11 votes
Accepted

Was user-agent identification used for some scripting attack techique?

This is a Joomla 0 Day Attack. Information found here: https://blog.sucuri.net/2015/12/remote-command-execution-vulnerability-in-joomla.html This is not a vulnerability test despite the __test. It is ...
user avatar
  • 32.5k
5 votes
Accepted

Whats the use of mysql.safe_mode in php.ini file?

To use safe_mode, set your database host, username and password in php.ini using the configuration parameters: sql.safe_mode = On mysqli.default_host = "127.0.0.1" mysqli.default_port = "3306" mysqli....
user avatar
5 votes
Accepted

A new database user for every database?

Rule number 1... never ever share passwords Sharing username and passwords is considered a bad practice, should it be for internet banking, social media or SQL databases, never use the same password ...
user avatar
  • 32.6k
4 votes

Server log what does "ho=<something>" mean?

I'm assuming that the bind.php file is not actually a part of Joomla, but rather a malicious script that the hacker uploaded to your site. In particular, just looking at the request parameters, it ...
user avatar
4 votes
Accepted

Can Joomla and Wordpress use same MySQL database?

Can I use the same MySQL database which is being used for joomla site? Of course. There is no technical reason why you can't. As long as there is no conflict in table names, which as you noted can be ...
user avatar
  • 85.7k
4 votes

Someone trying to attack my Joomla website with many different IP's

All the answers suggested I would do as well. If you want another level of security I would enable Apache Basic Authentication http://httpd.apache.org/docs/current/howto/auth.html with a username/...
user avatar
4 votes

Was user-agent identification used for some scripting attack techique?

The IP address that you linked does not resolve to a Google hostname therefore it is not Google. The person or bot is scanning your site for vulnerabilities. The first one is attempting to find a ...
user avatar
  • 32.6k
4 votes

Website is redirected to scam site only when clicking from Google search results

How could someone facilitate this? Compromising any part of the PHP/Joomla/Plugin code could be enough to implement such a redirect. However, these attacks are commonly achieved by writing malicious ...
user avatar
  • 40.9k
3 votes

Should we modify our Joomla robots.txt after Google's announcement on crawling of CSS and JavaScript?

Honestly you are better off removing everything from your robots.txt. As far as I can see, all PHP files in Joomla contain the line defined('_JEXEC') or die; Which means if you load a PHP file ...
user avatar
3 votes
Accepted

Why do some Nginx configurations block download agents using Wget?

User agent wget Blocking the user agent wget will block operating systems that use wget to download files within the terminal i.e Linux, MacOS, Arm etc. This will block every file from being ...
user avatar
  • 32.6k
3 votes

Need help with understanding IP blocks

If it helps at all the CIDR range converts to: 103.22.200.0-103.22.203.255
user avatar
3 votes
Accepted

No description for any page on the website is available in Google despite robots.txt allowing crawling

You are 303 redirecting to a login page which then redirects back: $ curl --head http://gsa.ece.umd.edu/ HTTP/1.1 303 See other Date: Sun, 25 May 2014 10:45:59 GMT Server: Apache/2.2.25 (Unix) ...
user avatar
3 votes

Can Joomla have a different URL for backend management?

I don't know much about the newest versions of joomla, but looking this up on the web shows that some features of the admin portal are hard-coded to the default admin URL. People recommend password ...
user avatar
  • 3,260
3 votes
Accepted

Suspicious script loads ONLY when navigating to site via search engines

Your web server contains a configuration file with a configuration that directs traffic from certain sources to pages with the suspicious script. If you're using apache, start with the .htaccess ...
user avatar
3 votes

Someone trying to attack my Joomla website with many different IP's

So, it's the same old story. But, first, there are few things to do: Firstly, scan your site with some antivirus tool. Then do this: Upgrade all components/plugins Upgrade your Joomla on latest ...
user avatar
  • 3,848
3 votes

Website is redirected to scam site only when clicking from Google search results

There are a lot of places where a little tiny code can be implemented that does the job! Here are my suggested steps to take towards fixing the issue: You may find out where is that code exactly ...
user avatar
2 votes
Accepted

Removing Joomla from client's server

Ask customer to backup and download the old site (Very important as a legal stand point). Look at Joomla's SQL details within configuration.php and take note of details. Delete contents of public_html ...
user avatar
  • 32.6k
2 votes

Best way to optimize joomla cache. Difference between Global configuration cache and system cache plugin

As I understand it, the global settings version caches the views and parameters of components and modules, rather than the content. This means that if you change the content, then the change will be ...
user avatar
  • 1,925
2 votes

Joomla jUpgrade stops at "Migrating undefined"

The process of migrating Joomla 1.5 to 2.5 is often a complex process, depending on what extensions you have on your current website. It's seldom a one-click process. First of all, make sure you have ...
user avatar
  • 121
2 votes

Revamped Joomla site to Google search engine

I'd probably run a crawler to collect all the URLs of your 1.5 site (a sitemap generator, or link checker should do this for you). When the site is live, Joomla 2.5 has a redirect manager (under ...
user avatar
  • 1,925
2 votes
Accepted

Why do I see requests from BOT/0.1 (BOT for JCE) in my server access log and what should I do about them?

Yes, this bot is trying to exploit JCE. It’s probably using a very powerful publicly available exploit (+ mirror) for JCE < 2.0.11. Although this is a really outdated version, many instances are ...
user avatar
  • 232
2 votes

Should we modify our Joomla robots.txt after Google's announcement on crawling of CSS and JavaScript?

In Joomla 3.3, these lines have been removed from the robots.txt file : Disallow: /templates/ Disallow: /media/ More info here : http://www.energizethemes.com/blog/joomla/have-you-updated-the-joomla-...
user avatar
  • 125
2 votes

Should we modify our Joomla robots.txt after Google's announcement on crawling of CSS and JavaScript?

Apart from the overall use/lack thereof, of robots.txt in a well managed Joomla site, with "good" third party extensions — the only places that should contain CSS, JS or images are: /images /media /...
user avatar
  • 316
2 votes
Accepted

Clear old SEO content from Joomla

One, two or even a few months sometimes isn't enough time for Google to update its index with changes in a website and start displaying results in the way the website owner is desiring. And it's not ...
user avatar
  • 375
2 votes

Why my site can run without .htaccess

Firstly if the file is named htaccess.txt then that means the htaccess file is not enabled as only the file named .htaccess will work. Secondly if you are getting a 500 error when you enable the ....
user avatar
2 votes

Why my site can run without .htaccess

A site doesn't have to have a .htaccess file. If you don't have a .htaccess file, your site will run on the settings in the apache and PHP server configuration files. Having your file named ....
user avatar
  • 7,527
2 votes
Accepted

.htaccess: DirectoryIndex and 403 forbidden

The only way to be sure why you are receiving a 403 error is to check the logs. They will tell you the reason why it is forbidden. The DirectoryIndex itself doesn't create any new rule that would ...
user avatar
  • 635
2 votes

.htaccess: DirectoryIndex and 403 forbidden

Check if your chosen index file (test.html) has the correct permission. I had the same problem when I uploaded my website files in zip format and then extracted using cPanel. By default, cPanel gave ...
user avatar
  • 251
2 votes
Accepted

Add an exception to Joomla's .htaccess rewrite rules to allow an Owncloud subdirectory

RewriteCond %{REQUEST_URI} !^/Joomla3 RewriteRule ^(.*)$ Joomla3/$1 [L] What these directives do is... if the requested URL does not start "/Joomla3" then internally rewrite the request to the "...
user avatar
  • 40.9k

Only top scored, non community-wiki answers of a minimum length are eligible