14
votes
Accepted
Google is changing my urls in search results - Joomla3 bug
In your header you have a canonical link (on line 11, just under <title>).
It looks like this on your page:
<link href="http://escene.ir/component/products/?task=view.12" rel="canonical" /&...
- 291
11
votes
Accepted
Was user-agent identification used for some scripting attack techique?
This is a Joomla 0 Day Attack. Information found here: https://blog.sucuri.net/2015/12/remote-command-execution-vulnerability-in-joomla.html
This is not a vulnerability test despite the __test. It is ...
- 32.5k
5
votes
Accepted
Whats the use of mysql.safe_mode in php.ini file?
To use safe_mode, set your database host, username and password in php.ini using the configuration parameters:
sql.safe_mode = On
mysqli.default_host = "127.0.0.1"
mysqli.default_port = "3306"
mysqli....
- 2,933
5
votes
Accepted
A new database user for every database?
Rule number 1... never ever share passwords
Sharing username and passwords is considered a bad practice, should it be for internet banking, social media or SQL databases, never use the same password ...
- 32.6k
4
votes
Server log what does "ho=<something>" mean?
I'm assuming that the bind.php file is not actually a part of Joomla, but rather a malicious script that the hacker uploaded to your site. In particular, just looking at the request parameters, it ...
- 8,802
4
votes
Accepted
Can Joomla and Wordpress use same MySQL database?
Can I use the same MySQL database which is being used for joomla site?
Of course. There is no technical reason why you can't. As long as there is no conflict in table names, which as you noted can be ...
- 85.7k
4
votes
Someone trying to attack my Joomla website with many different IP's
All the answers suggested I would do as well. If you want another level of security I would enable Apache Basic Authentication
http://httpd.apache.org/docs/current/howto/auth.html
with a username/...
- 141
4
votes
Was user-agent identification used for some scripting attack techique?
The IP address that you linked does not resolve to a Google hostname therefore it is not Google. The person or bot is scanning your site for vulnerabilities. The first one is attempting to find a ...
- 32.6k
4
votes
Website is redirected to scam site only when clicking from Google search results
How could someone facilitate this?
Compromising any part of the PHP/Joomla/Plugin code could be enough to implement such a redirect.
However, these attacks are commonly achieved by writing malicious ...
- 40.9k
3
votes
Should we modify our Joomla robots.txt after Google's announcement on crawling of CSS and JavaScript?
Honestly you are better off removing everything from your robots.txt. As far as I can see, all PHP files in Joomla contain the line
defined('_JEXEC') or die;
Which means if you load a PHP file ...
- 21.3k
3
votes
Accepted
Why do some Nginx configurations block download agents using Wget?
User agent wget
Blocking the user agent wget will block operating systems that use wget to download files within the terminal i.e Linux, MacOS, Arm etc. This will block every file from being ...
- 32.6k
3
votes
Need help with understanding IP blocks
If it helps at all the CIDR range converts to:
103.22.200.0-103.22.203.255
- 726
3
votes
Accepted
No description for any page on the website is available in Google despite robots.txt allowing crawling
You are 303 redirecting to a login page which then redirects back:
$ curl --head http://gsa.ece.umd.edu/
HTTP/1.1 303 See other
Date: Sun, 25 May 2014 10:45:59 GMT
Server: Apache/2.2.25 (Unix) ...
- 93.5k
3
votes
Can Joomla have a different URL for backend management?
I don't know much about the newest versions of joomla, but looking this up on the web shows that some features of the admin portal are hard-coded to the default admin URL. People recommend password ...
- 3,260
3
votes
Accepted
Suspicious script loads ONLY when navigating to site via search engines
Your web server contains a configuration file with a configuration that directs traffic from certain sources to pages with the suspicious script.
If you're using apache, start with the .htaccess ...
- 13.5k
3
votes
Someone trying to attack my Joomla website with many different IP's
So, it's the same old story.
But, first, there are few things to do:
Firstly, scan your site with some antivirus tool. Then do this:
Upgrade all components/plugins
Upgrade your Joomla on latest ...
- 3,848
3
votes
Website is redirected to scam site only when clicking from Google search results
There are a lot of places where a little tiny code can be implemented that does the job!
Here are my suggested steps to take towards fixing the issue:
You may find out where is that code exactly ...
- 181
2
votes
Accepted
Removing Joomla from client's server
Ask customer to backup and download the old site (Very important as a legal stand point).
Look at Joomla's SQL details within configuration.php and take note of details.
Delete contents of public_html ...
- 32.6k
2
votes
Best way to optimize joomla cache. Difference between Global configuration cache and system cache plugin
As I understand it, the global settings version caches the views and parameters of components and modules, rather than the content. This means that if you change the content, then the change will be ...
- 1,925
2
votes
Joomla jUpgrade stops at "Migrating undefined"
The process of migrating Joomla 1.5 to 2.5 is often a complex process, depending on what extensions you have on your current website. It's seldom a one-click process.
First of all, make sure you have ...
- 121
2
votes
Revamped Joomla site to Google search engine
I'd probably run a crawler to collect all the URLs of your 1.5 site (a sitemap generator, or link checker should do this for you).
When the site is live, Joomla 2.5 has a redirect manager (under ...
- 1,925
2
votes
Accepted
Why do I see requests from BOT/0.1 (BOT for JCE) in my server access log and what should I do about them?
Yes, this bot is trying to exploit JCE. It’s probably using a very powerful publicly available exploit (+ mirror) for JCE < 2.0.11. Although this is a really outdated version, many instances are ...
- 232
2
votes
Should we modify our Joomla robots.txt after Google's announcement on crawling of CSS and JavaScript?
In Joomla 3.3, these lines have been removed from the robots.txt file :
Disallow: /templates/
Disallow: /media/
More info here : http://www.energizethemes.com/blog/joomla/have-you-updated-the-joomla-...
- 125
2
votes
Should we modify our Joomla robots.txt after Google's announcement on crawling of CSS and JavaScript?
Apart from the overall use/lack thereof, of robots.txt in a well managed Joomla site, with "good" third party extensions — the only places that should contain CSS, JS or images are:
/images
/media
/...
- 316
2
votes
Accepted
Clear old SEO content from Joomla
One, two or even a few months sometimes isn't enough time for Google to update its index with changes in a website and start displaying results in the way the website owner is desiring. And it's not ...
- 375
2
votes
Why my site can run without .htaccess
Firstly if the file is named htaccess.txt then that means the htaccess file is not enabled as only the file named .htaccess will work.
Secondly if you are getting a 500 error when you enable the ....
- 10.1k
2
votes
Why my site can run without .htaccess
A site doesn't have to have a .htaccess file. If you don't have a .htaccess file, your site will run on the settings in the apache and PHP server configuration files.
Having your file named ....
- 7,527
2
votes
Accepted
.htaccess: DirectoryIndex and 403 forbidden
The only way to be sure why you are receiving a 403 error is to check the logs. They will tell you the reason why it is forbidden.
The DirectoryIndex itself doesn't create any new rule that would ...
- 635
2
votes
.htaccess: DirectoryIndex and 403 forbidden
Check if your chosen index file (test.html) has the correct permission.
I had the same problem when I uploaded my website files in zip format and then extracted using cPanel. By default, cPanel gave ...
- 251
2
votes
Accepted
Add an exception to Joomla's .htaccess rewrite rules to allow an Owncloud subdirectory
RewriteCond %{REQUEST_URI} !^/Joomla3
RewriteRule ^(.*)$ Joomla3/$1 [L]
What these directives do is... if the requested URL does not start "/Joomla3" then internally rewrite the request to the "...
- 40.9k
Only top scored, non community-wiki answers of a minimum length are eligible