Community Forums
Connect with us on LinkedIn
+ Reply to Thread
Results 1 to 6 of 6
  1. #1
    Member
    Join Date
    Mar 2003
    Posts
    16

    Default a website has been hacked

    I installed php-nuke on a web site and it has been hacked. when going to the 'home' page, it shows and then redirects to someone else.
    how do I clear this out from the site? I am willing to remove php-nuke completely.

    cPanel.net Support Ticket Number:

  2. #2
    cPanel Partner NOC cPanel Partner NOC Badge
    Join Date
    Apr 2003
    Posts
    2

    Default

    Most likely, you need to remove a line that starts with <meta refresh...> in the index.php. Remove that line, and then figure out how they put it there in the first place.

    cPanel.net Support Ticket Number:

  3. #3
    Registered User
    Join Date
    Mar 2002
    Posts
    1

    Default

    you ought to check www.phpnuke.org with this problem.

    cPanel.net Support Ticket Number:

  4. #4
    Member
    Join Date
    Mar 2003
    Posts
    863

    Default Re: a website has been hacked

    Originally posted by Bert W
    I installed php-nuke on a web site and it has been hacked. when going to the 'home' page, it shows and then redirects to someone else.
    how do I clear this out from the site? I am willing to remove php-nuke completely.

    cPanel.net Support Ticket Number:
    What version? It would be helpful to know so we can take corrective action to either remove what Fantastico is deploying or so we can inform our users.

    cPanel.net Support Ticket Number:

  5. #5
    Member
    Join Date
    Mar 2003
    Posts
    16

    Default

    How do I check version #?

    cPanel.net Support Ticket Number:

  6. #6
    Member
    Join Date
    Apr 2003
    Posts
    46

    Default Re: a website has been hacked

    Originally posted by Bert W
    I installed php-nuke on a web site and it has been hacked. when going to the 'home' page, it shows and then redirects to someone else.
    how do I clear this out from the site? I am willing to remove php-nuke completely.

    cPanel.net Support Ticket Number:
    By the sounds of this, it sounds as if someone has found another sql injection method OR some kiddie has gotten their hands on one for an older version of nuke. If this redirect is happening when you hit the main page, you can login to the admin section and just remove the post or login to cpanel and edit th SQL.

    One of the more common issues is not phpnuke being injected itself, but if this site has a shoutbox, or tagboard that does not strip html content then they are easier targets for wannabe hackers. I will be glad to assist you in correcting this if you would like

    cPanel.net Support Ticket Number:

Similar Threads & Tags
Similar threads

  1. Website hacked. how to restore data
    By yogesh_gamer in forum New User Questions
    Replies: 0
    Last Post: 04-30-2011, 03:15 AM
  2. Website Hacked.
    By ManojB in forum Security
    Replies: 13
    Last Post: 11-11-2008, 04:05 PM
  3. Website Hacked.
    By ManojB in forum cPanel and WHM Discussions
    Replies: 13
    Last Post: 11-11-2008, 04:05 PM
  4. Replies: 20
    Last Post: 06-17-2008, 11:59 PM
  5. Website Hacked
    By KenCo in forum Data Protection
    Replies: 23
    Last Post: 07-16-2007, 05:40 PM
Linkedin       Facebook       Twitter       RSS       Flickr       YouTube