We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
MODX Community Forums Archive

Website defect after Update

    • 48565
    • 2 Posts
    zyrano Reply #1, 12 years, 2 months ago
    I recently changed the company i work for and had my very first contact with moxd evolution.
    The website got hacked a few days ago and my task was to upgrade it and close the security issues.

    First i did a Backup of the complete Site and the SQL Database.
    Then i upgraded the installation via FTP to 1.0.14.

    Now the site appears corrupt. Contents appear mutliple times but exists in manager only one time.
    Are there any tips for that?

    Now the poor part – I noticed that the (infected) backup i took was from the wrong folder and so i just gut a valid database backup.
    Is there any chance to restore the sites abilities?

    Kind regards
    Patrick
      • 9995
      • 1,613 Posts
      fourroses666 Reply #2, 12 years, 2 months ago
      Maybe the host has a database backup?

      You can (re)upgrade easy with this file:
      https://github.com/evolution-cms/installer
      and see if it works.

      If you upgrade and don't check your folders on FTP for suspisious files it might still be infected.

      https://forums.modx.com/thread/91891/hack-check-your-site-assets-snippets-ditto-snippet-ditto2-php



        Evolution user, I like the back-end speed and simplicity smiley
        • 48565
        • 2 Posts
        zyrano Reply #3, 12 years, 2 months ago
        Quote from: fourroses666 at Aug 12, 2014, 09:58 AM
        Maybe the host has a database backup?
        I got a database backup by myself but no file-backup (saved the wrong folder...)
        Re-Upgrade didn't work. The database seems not to be corrupt. Each item is included once but rendered multiple times on one site.

        See here at the very bottom of the page.
        http://anonym.to/?http://vivavita.eu/sparpotenziale.html

          • 9995
          • 1,613 Posts
          fourroses666 Reply #4, 12 years, 2 months ago
          Ah, I mean if you asked the host if they have a total backup.
          Its possible with the host I always use. They have full backups made daily.
          But could be the hack happened long time ago thow..

          I really don't know whats going on but maybe some files are hacked which "breaks" your site.
          Did you follow all steps, like back-end check your Template, then check your used Chunks, check the used Snippets and Plugins.

          Could be the hacker added stuff there. Can't see from front-end.




            Evolution user, I like the back-end speed and simplicity smiley
            • 9995
            • 1,613 Posts
            fourroses666 Reply #5, 12 years, 2 months ago
            Checking the site I see it isn't clean yet. Some hidden stuff to other sites is going on (backlinks).
            You really need to clean the site first.

            When you are new to modx it will be pritty hard.
            Would be best to hire a professional to clean it really good.
            Prolly will take up 2-3 hours to check everything I guess.


            In your source on the bottom: 
            <div style="position:absolute;left:-2311px;top:-2794px;">
<a href="http://xxxsmithcenter.org/where-can-i-buy-zyban.html">where can i buy zyban</a>
<a href="http://xxxbildungsbericht.ifs-dortmund.de/index.php?q=preise-fur-cialis-luxemburg">preise für cialis in luxemburg</a>
<a href="http://xxxbildungsbericht.ifs-dortmund.de/index.php?q=cialis-once-day-preis">cialis once a day preis</a>
<a href="http://www.xxxkoblenzerstadtfotograf.de/kamagra-spanien-kaufen.html">kamagra in thailand bestellen</a>
<a href="http://www.xxxkoblenzerstadtfotograf.de/rezeptfreie-medikamente-cialis.html">scifil 20mg cialis generika</a>
<a href="http://www.xxxkoblenzerstadtfotograf.de/levitra-20-mg-online-apotheke.html">levitra 20 mg online apotheke</a> <a href="http://www.xxxkoblenzerstadtfotograf.de/cialis-online-kaufen-wo.html">cialis online ohne rezept kaufen</a>
</div>


            I haven't had this hack so I don't know where to look for. [ed. note: fourroses666 last edited this post 12 years, 2 months ago.]
              Evolution user, I like the back-end speed and simplicity smiley