Upgrade after being hacked...

Hi,

I just upgraded MODX Revolution from 2.1.2-pl to 2.2.2-pl after my site have been hacked by Kha&Mix:
http://notepad-plus-plus.org/tmp/hacked.png
So here are my questions:
1. Does 2.2.2-pl contained security fix regarding such attack?
2. The old URL for the multilingual page do not work anymore on 2.2.2-pl. For example, the old url:
http://notepad-plus-plus.org/fr/download/v6.1.2.html
become now:
http://notepad-plus-plus.org/fr/download/v6.1.2.html?c=fr
How can I make the old URL work on the new version?

Don

Hello,

It looks like your site is still compromised, so you need to find and secure the entry point first and foremost. Change all passwords (ftp, sftp, control panel, database, etc), and then you need to check the entire website for backdoors, and close them.

I would ask your host for help in tracking down the breach, as no MODX version is secure if there is a backdoor. Once you have that addressed you should be able to move forward and update the site to 2.2.2, which should help plug any known security risks.

If you need help feel free to ask.