Code altered & links not working. website hacked?

faridian / 2016-04-27 15:25:09   

hey Indexhibit community,
one of my sites is not working anymore
and i suspect it has been hacked.

the links on the site
salonuldeproiecte.ro
are not working anymore

when I tried to log in the back pannel, I encountered an error stating a parse error in the /salonuldeproiecte.ro/ndxzstudio/defaults.php file. it was a '.' symbol inserted after a ';' on line 71. I fixed that, so now I can access the back pannel again, but the links on the site are still not working.

my guess is that someone tempered with the code without us knowing. any chance on what can be done to get the site working again? we haven't done any backup unfortunately.

any help would be greatly appreciated.
thanks a million!
Radu

Vaska A / 2016-04-27 15:59:10   

You should always backup...even right now before you make more changes.

You should check your .htaccess file to make it sure it's the same as the one you got when you downloaded our files.

Secondly, maybe your webhost upgraded the server?

It should be hard to resolve, I don't believe you were hacked (or it was a very weak hack)...just try the above and see what happens.

faridian / 2016-04-27 16:26:35   

hey Vaska,
thanks so much for jumping in so quickly.
I replaced the .htaccess file with the original one,
but it didn't solve the problem.

But indeed, the host moved the mail services & mailboxes to a new server.

Any idea what should I do about this next?

thanks x 10000000! rrr

Vaska A / 2016-04-27 16:28:24   

Try undoing your mod_rewrite/clean url settings. There is a tutorial about them on our site.

Then we'll be back to index.php/url/url/ and we can go forward from there...

faridian / 2016-04-27 16:45:27   

ok, think I've undone the clean urls :)

Vaska A / 2016-04-27 16:46:43   

Nope, you haven't undone them in your defaults.php file. Re-read the tutorial about that part - set it to false.

faridian / 2016-04-27 16:53:07   

hmmm...it is false
[IMG]i68.tinypic.com/29fbkt5.jpg[/…]
i68.tinypic.com/…

Vaska A / 2016-04-27 16:55:07   

Remove the .htaccess file completely.

Vaska A / 2016-04-27 16:56:02   

It's not false though because the url's in your index do not have index.php - the 'false' setting is what controls that.

faridian / 2016-04-27 17:01:08   

ah, I remembered a trick.
all the index links are hidden,
and manually replaced in Post Nav area.

like so
i68.tinypic.com/…

faridian / 2016-04-27 17:29:54   

i've switched off the 'hide from index' option for the menu exhibits, but they won't show up. it's very weird :/

Vaska A / 2016-04-27 17:39:06   

Ask the host if it has mod_rewrite enabled.

This is really lame that they change the server and things totally stop working.

faridian / 2016-04-27 18:03:31   

yep :/
apparently mod rewrite is enabled by default

faridian / 2016-04-27 18:04:03   

the hosting provider is dream host, if it makes any difference

Vaska A / 2016-04-27 18:18:58   

Then this really doesn't make sense...I'm stumped.

This thread has been closed, thank you.