osCommerce Web Site /images/ dir Hacked

[Guest]

Hello,

 

I manage an osCommerce web site (2.2), MS2, which was recently hacked.

 

 

osCommerce 2.2-MS2

PHP Version 5.2.17

 

I found uploaded in the /images/ directory a PHP file 'ship.php', which was a remote file manager / upload/ download / view code, etc.

 

 

We have taken steps to secure the web site using Site Monitor, and have installed the modules in the forums listed below.

 

http://www.oscommerce.com/forums/topic/313323-how-to-secure-your-oscommerce-22-site/

 

 

Any recommendations?

[Guest]

In addition, we have deleted the 'file manager' which was provided by the original installation of osCommerce.

[Guest]

@@slicktony

 

If you have eradicated all malicious code and anomalous files and then installed the suggested security contribution, then your site should be secure.

 

 

 

 

 

Chris