Skip to main content
Share Your Experience: Take the 2024 Developer Survey
11 votes
Accepted

Was user-agent identification used for some scripting attack techique?

This is a Joomla 0 Day Attack. Information found here: https://blog.sucuri.net/2015/12/remote-command-execution-vulnerability-in-joomla.html This is not a vulnerability test despite the __test. It is ...
closetnoc's user avatar
  • 32.9k
5 votes
Accepted

A new database user for every database?

Rule number 1... never ever share passwords Sharing username and passwords is considered a bad practice, should it be for internet banking, social media or SQL databases, never use the same password ...
Simon Hayter's user avatar
4 votes

Was user-agent identification used for some scripting attack techique?

The IP address that you linked does not resolve to a Google hostname therefore it is not Google. The person or bot is scanning your site for vulnerabilities. The first one is attempting to find a ...
Simon Hayter's user avatar
4 votes

Someone trying to attack my Joomla website with many different IP's

All the answers suggested I would do as well. If you want another level of security I would enable Apache Basic Authentication http://httpd.apache.org/docs/current/howto/auth.html with a username/...
Rob Mascaro's user avatar
4 votes

Website is redirected to scam site only when clicking from Google search results

How could someone facilitate this? Compromising any part of the PHP/Joomla/Plugin code could be enough to implement such a redirect. However, these attacks are commonly achieved by writing malicious ...
MrWhite's user avatar
  • 42.8k
3 votes

Website is redirected to scam site only when clicking from Google search results

There are a lot of places where a little tiny code can be implemented that does the job! Here are my suggested steps to take towards fixing the issue: You may find out where is that code exactly ...
Gev Balyan's user avatar
3 votes

Someone trying to attack my Joomla website with many different IP's

So, it's the same old story. But, first, there are few things to do: Firstly, scan your site with some antivirus tool. Then do this: Upgrade all components/plugins Upgrade your Joomla on latest ...
Josip Ivic's user avatar
  • 3,878
2 votes
Accepted

.htaccess: DirectoryIndex and 403 forbidden

The only way to be sure why you are receiving a 403 error is to check the logs. They will tell you the reason why it is forbidden. The DirectoryIndex itself doesn't create any new rule that would ...
DKing's user avatar
  • 645
2 votes

Why my site can run without .htaccess

A site doesn't have to have a .htaccess file. If you don't have a .htaccess file, your site will run on the settings in the apache and PHP server configuration files. Having your file named ....
Steve's user avatar
  • 8,503
2 votes

Why my site can run without .htaccess

Firstly if the file is named htaccess.txt then that means the htaccess file is not enabled as only the file named .htaccess will work. Secondly if you are getting a 500 error when you enable the ....
Chris Rutherfurd's user avatar
2 votes
Accepted

Clear old SEO content from Joomla

One, two or even a few months sometimes isn't enough time for Google to update its index with changes in a website and start displaying results in the way the website owner is desiring. And it's not ...
FFrewin's user avatar
  • 375
2 votes
Accepted

Add an exception to Joomla's .htaccess rewrite rules to allow an Owncloud subdirectory

RewriteCond %{REQUEST_URI} !^/Joomla3 RewriteRule ^(.*)$ Joomla3/$1 [L] What these directives do is... if the requested URL does not start "/Joomla3" then internally rewrite the request to the "...
MrWhite's user avatar
  • 42.8k
2 votes

.htaccess: DirectoryIndex and 403 forbidden

Check if your chosen index file (test.html) has the correct permission. I had the same problem when I uploaded my website files in zip format and then extracted using cPanel. By default, cPanel gave ...
alds's user avatar
  • 271
2 votes

What does the string "";} /*B6D1B1EE*/ ?>" at the top of my Joomla page mean?

For some reason PHP code is being sent to the browser. It may be that PHP is not enabled n that server but that page contains some. It could be short tags are used but the server has not enabled it. ...
John Conde's user avatar
  • 86.3k
2 votes

Someone trying to attack my Joomla website with many different IP's

I suggest you scan your whole server to find malicious files inside. For the site's security, I think you already use Akeeba Admin Tools. If you do then change the administrator url with some random ...
Mg Thar's user avatar
  • 121
2 votes

Was user-agent identification used for some scripting attack techique?

Additionally to other answers, note that the fact that this attack apparently worked suggests you are running an old, insecure version of PHP. A fix for the bug that this attack exploits was released ...
Periata Breatta's user avatar
2 votes
Accepted

Joomla Meta Title "reset to default"

Your SERP link looks fine from here... It is likely that you are hitting a set of servers that are not up to date yet. Just be patient. It will all work out okay.
closetnoc's user avatar
  • 32.9k
2 votes

Joomla Website Creating Automatic Unwanted Subdomains

The issue that you are having is in relation to cPanel and your web host. Typically a default install of a cPanel hosting account will setup various services that can be accessed by your domain. Often ...
Simon Hayter's user avatar
2 votes
Accepted

Where do I put my static HTML and CSS files when migrating my site from Joomla?

If you are not using Joomla at all, my suggested step is to make a complete backup of the joomla site, then delete it and replace it with your files. If you aren't using Joomla any more then you don'...
Steve's user avatar
  • 8,503
2 votes

Unable to find cause why Joomla website blacklisted by Google (Deceptive site ahead)

If the new website has been developed independently from the infected website then you may be able to delete the files on the server and the database and then upload the new website cleanly without ...
Neil Robertson's user avatar
2 votes

Where do I put my static HTML and CSS files when migrating my site from Joomla?

Typically when replacing a Joomla website, I move all the files and folders in the root folder (e.g. /public_html) into a sub folder such as /public_html/old which I retain for a few weeks in case I ...
Neil Robertson's user avatar
1 vote

Unable to find cause why Joomla website blacklisted by Google (Deceptive site ahead)

You say, new website is placed it on a temporary separate domain. There is a clear cause on the test page: "domain is blacklisted by Google Safe Browsing". Beside of this, what means "new website we ...
Evgeniy's user avatar
  • 10.1k
1 vote

How to change from worpdress to joomla application

WordPress and Joomla are both PHP based content management systems with similar requirements: https://wordpress.org/about/requirements https://downloads.joomla.org/technical-requirements It's ...
Neil Robertson's user avatar
1 vote

How to change from worpdress to joomla application

We can't answer this with certainty. You will have to discuss this with your host. Generally a WP hosting plan includes installation of WP and some sort of management. It is unlikely you will be ...
Steve's user avatar
  • 8,503
1 vote

Weird new users in Joomla user group "Administrator"

It's likely Joomla has not been patched to the latest version. For example, a recent vulnerability fixed in the Joomla 3.6.5 update "allows for existing user accounts to be modified; to include ...
Neil Robertson's user avatar
1 vote

Weird new users in Joomla user group "Administrator"

Your installation seems to be hacked. People can programmatically apply new users to hacked sites, even sites are deactivated. Backup your database. Setup a folder protect for your Joomla ...
Evgeniy's user avatar
  • 10.1k
1 vote

Weird new users in Joomla user group "Administrator"

A hacker has access to your Joomla instance with administrative rights, you should be worried: Your site is compromised. This is probably due to not keeping the site with the latest updates, which ...
marcanuy's user avatar
  • 2,644
1 vote
Accepted

Did malware on my Joomla site come from a WordPress install?

Ideally, websites should be hosted on their own shared web hosting account. When one website is compromised in a shared web hosting account, then the others will also likely become compromised. ...
Neil Robertson's user avatar
1 vote

What does the string "";} /*B6D1B1EE*/ ?>" at the top of my Joomla page mean?

It looks like Joomla 1.5 websites without the Session Hardening and File Upload Security patches are being hacked. These patches can be found at: https://docs.joomla.org/...
Neil Robertson's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible