14
In your header you have a canonical link (on line 11, just under <title>).
It looks like this on your page:
<link href="http://escene.ir/component/products/?task=view.12" rel="canonical" />
This element tells Google your preferred URL for a page which has several urls to choose from. This is to prevent you from being penalized for having ...
11
This is a Joomla 0 Day Attack. Information found here: https://blog.sucuri.net/2015/12/remote-command-execution-vulnerability-in-joomla.html
This is not a vulnerability test despite the __test. It is an attack.
Make sure that any Joomla install is as up to date as possible.
Another option is to simply use .htaccess to intercept this exploit by looking for ...
6
You are definitely hacked, hackers recently have been employing methods which make the site appear normal to a direct user, but when coming from Google will redirect to their website.
You basically need to change all your passwords, and then sift through your code. As your tags state you're using joomla you should be able to replace all the joomla core ...
5
Start from Scratch
If you have a recent database and files copy nuke all and start all over again. This is truly the best way there is when you have been hacked in a massive way.
No Good Backups
Most of the time there is no good backup in my experience. And I guess you do not either. If you did a scan with ClamAV and or online scans with sites like
...
5
To use safe_mode, set your database host, username and password in php.ini using the configuration parameters:
sql.safe_mode = On
mysqli.default_host = "127.0.0.1"
mysqli.default_port = "3306"
mysqli.default_user = "root"
mysqli.default_pw = "Password123"
By having it configured there you will not need it in your PHP scripts - enabling you to update your ...
5
Rule number 1... never ever share passwords
Sharing username and passwords is considered a bad practice, should it be for internet banking, social media or SQL databases, never use the same password and preferably use a different username. Sharing one password means they only need to hack one password and the vault is open.
Investigate how they got in...
...
4
Sorry but no, you can't. WordPress is entirely scripted in PHP. If you host a copy of a WordPress installation on a S3 bucket you will be lacking the PHP interpreter and the mySQL engine.
The whole deal with EC2 is having a virtual machine so you can run services like a mysql server or a php instance.
Anyway, with some elbow grease you could host a static ...
4
If you are using Wordpress now, and simply trying to redirect old Joomla urls to your new urls I suggest using a plugin to make your life easier.
I recommend this plugin a lot:
http://wordpress.org/extend/plugins/redirection/
Also keep in mind that you should use fancy permalinks within Wordpress instead of the standard ID numbers. You can find this ...
4
Your regular expression has the following problems:
It only has .* for the "site" and "sectionname", but is missing one for the "categoryname". Based on your example, there should be a third directory level in your regex.
You have parenthesis around items which you don't need to reference, but no parenthesis around the ID, which you will need to reference. ...
answered Mar 20 '13 at 14:22
4
I'm assuming that the bind.php file is not actually a part of Joomla, but rather a malicious script that the hacker uploaded to your site. In particular, just looking at the request parameters, it appears likely that the script is being used to send e-mail spam, possibly using someone else's hijacked e-mail account.
Here's what the request parameters in ...
4
I guess a 301 redirect is certainly not an option since the whole site structure will be different.
But if you are coming from Joomla to WordPress, the site structure will be predictably different and thus 301 redirects are both feasible and desired. As you can see in this other question, it doesn't have to be all that complicated of a rule to accomplish ...
4
Can I use the same MySQL database which is being used for joomla site?
Of course. There is no technical reason why you can't. As long as there is no conflict in table names, which as you noted can be overcome with table prefixes, they can happily coincide.
Is this a good practical decision for a small site?
Sure. This is quite common.
However, if you ...
4
All the answers suggested I would do as well. If you want another level of security I would enable Apache Basic Authentication
http://httpd.apache.org/docs/current/howto/auth.html
with a username/password on your admin URL within Joomla (make sure that this URL is https accessible only). This is done within your httpd.conf file whereby you generate a ...
4
The IP address that you linked does not resolve to a Google hostname therefore it is not Google. The person or bot is scanning your site for vulnerabilities. The first one is attempting to find a Joomla vulnerability.
These events are a regular occurrence on most websites, You should ensure that you are following best practices and harden your website, the ...
4
How could someone facilitate this?
Compromising any part of the PHP/Joomla/Plugin code could be enough to implement such a redirect.
However, these attacks are commonly achieved by writing malicious code to the .htaccess file that then checks the HTTP Referer and redirects the user visiting from the Google SERPs.
Would taking control of the Google ...
3
To do this in Joomla 2.5 do the following steps:
Login to the Joomla backend using your administrator account
Click menu manager
Click Main Menu
Click on Home and take note of the menu ID.
Then add the following code to template's index.php file, before <jdoc:include type="head" /> (note that in the example below, 101 should be replaced with the ...
3
The only solution I found until now (Joomla 3.0) is adding the following snippet in your template's index.php file before <jdoc:include type="head" />.
The snippet for my page looks like this:
<?php
if (!strncmp($this->getTitle(), "Home", 4))
{
$app = JFactory::getApplication();
$this->setTitle( $app->getCfg( 'sitename' ) );
}
?>
...
3
The biggest reason why using an SEO component in all versions of Joomla even 3+ is that Joomla has a habit of creating multiple urls for one page/post meaning that Google finds these as duplicates.
There are just so many reasons why using a SEO extensions for Joomla is better than using the core but here's a few:
Better REL="Canonical" Support
Better at ...
3
The feature you are looking for is called OPEN GRAPH. Its just a bunch of meta tags you place in the head of your site which tell Facebook information about it. That way when someone shares your site on Facebook, Facebook will use that information to populate the post. This includes the share image.
Here are the meta tags we use (replace xxx with ...
3
HTML5 uses better markups that are not only easier to use but also is slightly better for SEO purposes, while its not amazing for SEO as Google yets to favor HTML5 websites it does better from Rich Markups and the ASIDE elements and Articles which helps Google establish what the page is about and maybe elements which have nothing to do with the page itself. ...
3
It's a tough one to answer since you may need better hosting no matter what you do due to the sheer amount of visitors you have at once. But just like a car if you want to make it faster you throw out things you don't need which add weight to the car, by removing the weight you go faster.
So you really want to focus on reducing requests on your server by ...
3
You can specify page titles in "Parameters (System)" in the menu item.
Joomla 1.5.9 is very old now and you should at least update to Joomla 1.5.26 and install applicable Security hotfixes for Joomla EOL versions.
Ideally you should be thinking about migrating to Joomla 2.5 or Joomla 3.2.
3
You've made the redirect correctly. It works well. However you must wait until Google recrawl and reindex it before it appears on search results.
3
I don't know much about the newest versions of joomla, but looking this up on the web shows that some features of the admin portal are hard-coded to the default admin URL. People recommend password protecting the admin directory through .htaccess for better security. The other option is to use extensions, but as a general rule I hate using extensions to ...
3
You are 303 redirecting to a login page which then redirects back:
$ curl --head http://gsa.ece.umd.edu/
HTTP/1.1 303 See other
Date: Sun, 25 May 2014 10:45:59 GMT
Server: Apache/2.2.25 (Unix) mod_ssl/2.2.25 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4
X-Powered-By: PHP/5.4.21
Set-Cookie: c32b08af5ad5c16062381828f6a1b64e=6d66a9870a7067c444930d8deb190cd9; ...
answered May 25 '14 at 10:49
3
If it helps at all the CIDR range converts to:
103.22.200.0-103.22.203.255
3
User agent wget
Blocking the user agent wget will block operating systems that use wget to download files within the terminal i.e Linux, MacOS, Arm etc. This will block every file from being downloaded using wget example.pdf.
But why block wget?
There's no right or wrong to this question but generally webmasters want site visitors actually visiting their ...
3
Honestly you are better off removing everything from your robots.txt. As far as I can see, all PHP files in Joomla contain the line
defined('_JEXEC') or die;
Which means if you load a PHP file directly in the browser all you get is a blank file, which search engines will ignore. (They shouldn't ever come across these anyway unless you linked them directly.)...
3
Your web server contains a configuration file with a configuration that directs traffic from certain sources to pages with the suspicious script.
If you're using apache, start with the .htaccess files in your document root folder and every folder recursively within it.
Look for any lines containing "user_agent" or "remote_addr" or even google or other ...
answered May 21 '15 at 16:40
Mike -- No longer here
13.2k4 gold badges21 silver badges50 bronze badges
3
So, it's the same old story.
But, first, there are few things to do:
Firstly, scan your site with some antivirus tool. Then do this:
Upgrade all components/plugins
Upgrade your Joomla on latest version
Limit the upload of files only to allowed extensions (e.g. .pdf, .doc, .docx)
Maybe put some additional stuff before upload (let's say captcha or some ...
Only top voted, non community-wiki answers of a minimum length are eligible
