Somebody has hacked into my site?

[Guest]

Hi folks,

I have just taken a look at one of my sites and I have noticed that where it used to read 'Powered by OS Commerce' it has now changed to 'Copyright ? 2003 - 2004 Platinum Home Automation Ltd '. I dont no who the hell these people are and more to the point how the hell did they achieve doing this. My main concern is that these people have access to my server and have somehow gone into my 'English.php' file and changed it.

 

If any people out there have any ideas on how they have done this please could you let me know and also what I can do to stop this.

 

Many thanks.

[Guest]

Hey this is a very common thing, first thing, dont panic, it is happening because your site and other sites on that host are using the same tmp directory on the host server. First go into your admin and change your tmp directory into a directory on your own website so your not using the server tmp anymore. Theres more info about this, just do a search to find out more.

[AlanR]

More likely you've got cache turned on and you have not specified your own directory for it to use. These people are probably on the same server and I doubt they have any interest in hacking your site.

 

http://www.platinumhome.ie/shop/main.php

[Guest]

Thanks for the quick response, I will change the tmp directory. I thought it was strange that they only changed that line and nothing more else.

Would you advise that I leave the Cache on Alan?

[AlanR]

Thanks for the quick response, I will change the tmp directory. I thought it was strange that they only changed that line and nothing more else.

Would you advise that I leave the Cache on Alan?

Sure, provided you define a unique directory for it to use. How are you storing sessions? mysql or the default? If it's default it's also using the server tmp unless you define a unique directory. You could make it the same as the one you create for cache.

 

Admin -> Configuration -> Sessions -> Session Directory

[Guest]

Thanks Alan, I am using Mysql, upon looking at that setup my 'Use Cache' is set to False and the 'Cache directory' is set to /tmp/. So am I right in saying that I should just create a new tmp directory?

[digi]

hey guys,

 

anyone know how they put that notice on top of there site?

 

http://www.platinumhome.ie/shop/main.php

 

digi

[AlanR]

Thanks Alan, I am using Mysql, upon looking at that setup my 'Use Cache' is set to False and the 'Cache directory' is set to /tmp/. So am I right in saying that I should just create a new tmp directory?

You can name the directory anything you like (like HelloKitty for example) and put it anywhere you want. Just set the path for cache to whatever you name it.

 

The best place to put it is in your httpdocs folder (or whatever it's called on your server). That puts it outside of public web space, on the same level as your root folder.

[AlanR]

hey guys,

 

anyone know how they put that notice on top of there site?

 

http://www.platinumhome.ie/shop/main.php

 

digi

There's a couple contributions for that. I don't have experience with either.

 

http://www.oscommerce.com/community?contri...ce&category=all

[user99999999]

The cache only affects the categegory and manufacture box so that doesnt explain how the copyright message in includes/languages/english.php could get changed