14
In your header you have a canonical link (on line 11, just under <title>).
It looks like this on your page:
<link href="http://escene.ir/component/products/?task=view.12" rel="canonical" />
This element tells Google your preferred URL for a page which has several urls to choose from. This is to prevent you from being penalized for having ...
11
This is a Joomla 0 Day Attack. Information found here: https://blog.sucuri.net/2015/12/remote-command-execution-vulnerability-in-joomla.html
This is not a vulnerability test despite the __test. It is an attack.
Make sure that any Joomla install is as up to date as possible.
Another option is to simply use .htaccess to intercept this exploit by looking for ...
8
Robots.txt is not used for preventing users to browse directories. Directory browsing is handled by the web server settings.
All robots.txt does is asking search engines to not index the content within the directories that you specify.
6
You are definitely hacked, hackers recently have been employing methods which make the site appear normal to a direct user, but when coming from Google will redirect to their website.
You basically need to change all your passwords, and then sift through your code. As your tags state you're using joomla you should be able to replace all the joomla core ...
5
Start from Scratch
If you have a recent database and files copy nuke all and start all over again. This is truly the best way there is when you have been hacked in a massive way.
No Good Backups
Most of the time there is no good backup in my experience. And I guess you do not either. If you did a scan with ClamAV and or online scans with sites like
...
5
To use safe_mode, set your database host, username and password in php.ini using the configuration parameters:
sql.safe_mode = On
mysqli.default_host = "127.0.0.1"
mysqli.default_port = "3306"
mysqli.default_user = "root"
mysqli.default_pw = "Password123"
By having it configured there you will not need it in your PHP scripts - enabling you to update your ...
5
Rule number 1... never ever share passwords
Sharing username and passwords is considered a bad practice, should it be for internet banking, social media or SQL databases, never use the same password and preferably use a different username. Sharing one password means they only need to hack one password and the vault is open.
Investigate how they got in...
...
4
Assuming you don't want to use a specific Classified Ads Content Management System, I think that at this point you should consider Drupal as well. Drupal is very effective on user/permission management by default, and Drupal 7 already allows custom content types by default.
There's even a module for that: http://drupal.org/project/ed_classified and http://...
4
You don't specify which version of Joomla! you're using but in general you can specify the template in use two ways.
First off you can specify the default template via the "Template Manager" - this is the same in both 1.5.x and the 2.5 series of Joomla!
The second option is that you can specify a particular template to be used for a particular menu item. ...
4
Sorry but no, you can't. WordPress is entirely scripted in PHP. If you host a copy of a WordPress installation on a S3 bucket you will be lacking the PHP interpreter and the mySQL engine.
The whole deal with EC2 is having a virtual machine so you can run services like a mysql server or a php instance.
Anyway, with some elbow grease you could host a static ...
4
If you are using Wordpress now, and simply trying to redirect old Joomla urls to your new urls I suggest using a plugin to make your life easier.
I recommend this plugin a lot:
http://wordpress.org/extend/plugins/redirection/
Also keep in mind that you should use fancy permalinks within Wordpress instead of the standard ID numbers. You can find this ...
4
Your regular expression has the following problems:
It only has .* for the "site" and "sectionname", but is missing one for the "categoryname". Based on your example, there should be a third directory level in your regex.
You have parenthesis around items which you don't need to reference, but no parenthesis around the ID, which you will need to reference. ...
answered Mar 20 '13 at 14:22
4
I'm assuming that the bind.php file is not actually a part of Joomla, but rather a malicious script that the hacker uploaded to your site. In particular, just looking at the request parameters, it appears likely that the script is being used to send e-mail spam, possibly using someone else's hijacked e-mail account.
Here's what the request parameters in ...
4
I guess a 301 redirect is certainly not an option since the whole site structure will be different.
But if you are coming from Joomla to WordPress, the site structure will be predictably different and thus 301 redirects are both feasible and desired. As you can see in this other question, it doesn't have to be all that complicated of a rule to accomplish ...
4
Can I use the same MySQL database which is being used for joomla site?
Of course. There is no technical reason why you can't. As long as there is no conflict in table names, which as you noted can be overcome with table prefixes, they can happily coincide.
Is this a good practical decision for a small site?
Sure. This is quite common.
However, if you ...
4
All the answers suggested I would do as well. If you want another level of security I would enable Apache Basic Authentication
http://httpd.apache.org/docs/current/howto/auth.html
with a username/password on your admin URL within Joomla (make sure that this URL is https accessible only). This is done within your httpd.conf file whereby you generate a ...
4
The IP address that you linked does not resolve to a Google hostname therefore it is not Google. The person or bot is scanning your site for vulnerabilities. The first one is attempting to find a Joomla vulnerability.
These events are a regular occurrence on most websites, You should ensure that you are following best practices and harden your website, the ...
4
How could someone facilitate this?
Compromising any part of the PHP/Joomla/Plugin code could be enough to implement such a redirect.
However, these attacks are commonly achieved by writing malicious code to the .htaccess file that then checks the HTTP Referer and redirects the user visiting from the Google SERPs.
Would taking control of the Google ...
3
The biggest reason why using an SEO component in all versions of Joomla even 3+ is that Joomla has a habit of creating multiple urls for one page/post meaning that Google finds these as duplicates.
There are just so many reasons why using a SEO extensions for Joomla is better than using the core but here's a few:
Better REL="Canonical" Support
Better at ...
3
No, don't copy the tables - that schema has changed quite a bit. You can install the free JUpgrade extension, which will download and install a 2.5 into a subfolder of your website and populate the new DB with your content, categories, users, etc. It can also handle some 3rd party extensions like Community Builder, Virtuemart and Kunena. That's the official ...
3
Artisteer is not good enough. You cannot get the original look. It is better to manually convert the theme.
Take any Drupal 7 framework like Zen and Genesis
Style the CSS using the Joomla/WordPress style sheet.
Use the same design elements that are used in the old theme.
Use some Modules like Views and Panels to get the teasers on the front page.
If you ...
3
It's still going to be hard diagnosing the problem without disabling suspected components (diagnosing performance problems is like diagnosing any other sort of problem; it's a process of elimination, which requires isolating/controlling different variables to test different hypotheses), but useful tools to have are:
Monitoring / visualization tools: e.g. ...
3
The paid memberships pro plugin works well, it supports Stripe, PayPal Website Payments Pro, PayPal Express, or Authorize.net for processing payments.
3
The only solution I found until now (Joomla 3.0) is adding the following snippet in your template's index.php file before <jdoc:include type="head" />.
The snippet for my page looks like this:
<?php
if (!strncmp($this->getTitle(), "Home", 4))
{
$app = JFactory::getApplication();
$this->setTitle( $app->getCfg( 'sitename' ) );
}
?>
...
3
To do this in Joomla 2.5 do the following steps:
Login to the Joomla backend using your administrator account
Click menu manager
Click Main Menu
Click on Home and take note of the menu ID.
Then add the following code to template's index.php file, before <jdoc:include type="head" /> (note that in the example below, 101 should be replaced with the ...
3
The feature you are looking for is called OPEN GRAPH. Its just a bunch of meta tags you place in the head of your site which tell Facebook information about it. That way when someone shares your site on Facebook, Facebook will use that information to populate the post. This includes the share image.
Here are the meta tags we use (replace xxx with ...
3
HTML5 uses better markups that are not only easier to use but also is slightly better for SEO purposes, while its not amazing for SEO as Google yets to favor HTML5 websites it does better from Rich Markups and the ASIDE elements and Articles which helps Google establish what the page is about and maybe elements which have nothing to do with the page itself. ...
3
It's a tough one to answer since you may need better hosting no matter what you do due to the sheer amount of visitors you have at once. But just like a car if you want to make it faster you throw out things you don't need which add weight to the car, by removing the weight you go faster.
So you really want to focus on reducing requests on your server by ...
3
You can specify page titles in "Parameters (System)" in the menu item.
Joomla 1.5.9 is very old now and you should at least update to Joomla 1.5.26 and install applicable Security hotfixes for Joomla EOL versions.
Ideally you should be thinking about migrating to Joomla 2.5 or Joomla 3.2.
Only top voted, non community-wiki answers of a minimum length are eligible
