a website has been hacked

Bert W

Member
Mar 2, 2003
16
0
151
I installed php-nuke on a web site and it has been hacked. when going to the 'home' page, it shows and then redirects to someone else.
how do I clear this out from the site? I am willing to remove php-nuke completely.

cPanel.net Support Ticket Number:
 

Yert

Registered
PartnerNOC
Apr 22, 2003
2
0
151
Most likely, you need to remove a line that starts with <meta refresh...> in the index.php. Remove that line, and then figure out how they put it there in the first place.

cPanel.net Support Ticket Number:
 

sexy_guy

Well-Known Member
Mar 19, 2003
847
0
166
Originally posted by Bert W
I installed php-nuke on a web site and it has been hacked. when going to the 'home' page, it shows and then redirects to someone else.
how do I clear this out from the site? I am willing to remove php-nuke completely.

cPanel.net Support Ticket Number:
What version? It would be helpful to know so we can take corrective action to either remove what Fantastico is deploying or so we can inform our users.

cPanel.net Support Ticket Number:
 

geekhosting

Well-Known Member
Apr 7, 2003
46
0
156
Originally posted by Bert W
I installed php-nuke on a web site and it has been hacked. when going to the 'home' page, it shows and then redirects to someone else.
how do I clear this out from the site? I am willing to remove php-nuke completely.

cPanel.net Support Ticket Number:
By the sounds of this, it sounds as if someone has found another sql injection method OR some kiddie has gotten their hands on one for an older version of nuke. If this redirect is happening when you hit the main page, you can login to the admin section and just remove the post or login to cpanel and edit th SQL.

One of the more common issues is not phpnuke being injected itself, but if this site has a shoutbox, or tagboard that does not strip html content then they are easier targets for wannabe hackers. I will be glad to assist you in correcting this if you would like

cPanel.net Support Ticket Number: