Website Hacked

What it seems to me that its not hacked. Same thing happens to websites hosted by Freehostia.com. Usually once in 24h all hosted sites go down and give this error. But they come back up in about 1 hour. I think its your hosts problem. BTW you had you DB backed up right?

how did the site look like when it was 'hacked'?
do you have a database backup?
did you use the latest version of php-fusion?
did you use any third party infusion or mod?

It was re-directing the website to a terrorist website.
No I didn't have any database backup/
No, my version was old....my mistake!
I use several Mods, but all downloaded from the Mods website.

Thanks.

1) You should backup your current DB, ignoring the fact that site not working.
To do that use your hosters CP (Control Panel) or install PhpMyAdmin into a new dir.
2) Then you should search the DB for any suspicious entries - terrorists websites URL for example.

If you dont find anything there:

Delete your Php Fusion dir (After you have downloaded it to your PC). You can also just rename the directory.
Get a fresh copy of 6.0.13
Upload + Install.
Now you have empty Fusion and dead DB backup.
Using PhpMyAdmin try first to load the backup you made of the old DB. Search for any wrong configuration settings because there are always some dead links, pic plaseholders etc.

If your site still shows the same error after loading the backup:

Choose the users, posts, pictures fields (all data you need to recover users and posts and users activity) - through PhpMyAdmin and make a seperate backup of them.
Then got to your new Php Fusion and load this backup through ACP.
It should recover users, theirs posts etc. (all you chose to include in the new backup from old servers DB).
I hope this helps. (If theres something you cant unerstand - kotkapoiss@hotmail.com).
NOTE: This recovery method is not tested, so there might be errors and better ways).B)

Domain Hacked,
www.forexpivotsbrasil.com

Hi Guys,

That’s me again. Unbelievable, my site was hacked again by some bloody Turkish hacker !!!!
It seems this time they attacked the domain, as I can get into any page of the site (PHP pages).

Do you have an idea how to sort this out?

I’m wondering choosing another CMS as I’ve been attacked so many times, and I think PHPFusion has some open doors.


Thanks, Marc.

PHPFusion has no open door. it looks like they hacked the server of your provider or gained access to your ftp. It is impossible to write to index.php from within PHPFusion if the server is configured properly.

But there's no new file or modified files on my FTP???

index.php is still the same?
new panels?
modified startpage?

Has anyone ever asked those that get their sites hacked, if they sites have anonymous ftp access? Some hosts automatically setup accounts in that manner, which is just wrong. Some issues may not even be mods that are installed.

My Hositing account is with GoDaddy?
What should I do to see that I'm on Anonymous FTP?

They've changed my index.php and news.php.

I've just re-inserte fresh ones and can have acces to the pages, but the domain itself is sitll hacked, showing the turkish page.

Thanls.