Hacked website

Also from your htaccess rewrite code you're using Evo, what version is the site running? There were several security fix releases recently.

it is version 1.0.6

There have been some cross site request forgery bugs fixed since that release. https://raw.github.com/modxcms/evolution/v1.0.10/install/changelog.txt

There's also spam links at the bottom of most pages just before the closing body tag:



In your htaccess is there any auto_prepend_file code? [ed. note: absent42 last edited this post 13 years, 5 months ago.]

Looking through the backlinks to your site on Alexa, there are lots other Evo sites with the exact same hacks done to them. So, this suggests that it is an exploit in Evo that's being used. First off should be updating your site to the current versions 1.0.10

Hi Dan
this is moving outside my current skillset as I am a complete newbie to modx. do you have a price list to do this upgrade and fix this hack?

thanks

I don't have any experience with Evo, but have a look through the MODX professionals directory, I'm sure someone will fit the bill.

http://modx.com/professionals/

Hi Dan

Thanks. Would you have any idea how to clean up all the rogue links.

for example if you type in lyonsdown viagra into google there are tons of bad links. How best could they be cleaned up?

Thanks

Quote from: [email protected] at May 10, 2013, 08:24 AM

Hi Dan

Thanks. Would you have any idea how to clean up all the rogue links.

for example if you type in lyonsdown viagra into google there are tons of bad links. How best could they be cleaned up?

Thanks

The only way to get them out of the Google/Bing etc indexes is to get them removed from the sites they're on, then wait for Google/Bing to re-crawl those pages.

There are some services which will attempt this for you, but basically, all they do is contact the sites where the links are and demand their removal/threaten legal action.

Hi

When I find the link in google. by typing in lyonsdown viagra there are lots of rogue links then when I click on them they just forward to the viagra page. I am not sure how to actually remove them from