https://forums.modx.com/thread/?thread=2958 https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=5#dis-post-485898
You must update phpThumb as recommended above EVEN if you are running modx revo. I will not post the hack on the forum but please pm me if you wish to test your site.

More details: http://forums.modx.com/thread/88111/modx-security-issue]]> davidpede Dec 23, 2013, 12:14 PM https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=5#dis-post-485898 https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=5#dis-post-467758 Everettg_99 May 31, 2013, 02:54 PM https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=5#dis-post-467758 https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=5#dis-post-467748
I got my account hacked through an old phpThumb version exploit so I'm updating my phpThumb to the last version.

Unfortunately my web host doesn't have escapeshellarg() activated for my account so I was wondering if there's a way to run the last version of phpThumb without it.

Thanks!]]> s3nd41 May 31, 2013, 12:39 PM https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=5#dis-post-467748 https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=5#dis-post-18376 Everettg_99 Jun 28, 2011, 10:49 AM https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=5#dis-post-18376 https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=5#dis-post-18375 labr1005 Jun 28, 2011, 04:36 AM https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=5#dis-post-18375 https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=4#dis-post-18374
If you have replaced ALL the files with freshly-downloaded MODx versions, did you also replace all the user-created files? If you want to go through the MODx database, I’d look carefully at the templates to see if they were including extra JS stuff and all all the Snippets and Plugins to see if they were executing any extra code. For all those MODx snippets, paste the original Snippet code back into your database copy to ensure that you have the expected code executing and not some malicious stuff.]]> Everettg_99 Jun 27, 2011, 01:50 PM https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=4#dis-post-18374 https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=4#dis-post-18373 I took the rather extreme step of deleting all of the existing files from the server, uploading a new copy of the modx 1.0.5 and doing an advanced reinstall using the same database.

I’m still seeing 302 redirect attempts after I login with the manager, so there must be something leftover in the database. I’ve search via phpmyadmin but I don’t see anything, and I’m not really sure exactly what to search for.]]> mohicanlove Jun 25, 2011, 01:05 PM https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=4#dis-post-18373 https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=4#dis-post-18372 Everettg_99 Jun 21, 2011, 04:00 AM https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=4#dis-post-18372 https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=4#dis-post-18371 Thanatermesis Jun 20, 2011, 05:44 PM https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=4#dis-post-18371 https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=4#dis-post-18370 sottwell Jun 20, 2011, 03:32 PM https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=4#dis-post-18370