<![CDATA[ Hacked site: center_t.php - MODX Community Forums]]> https://forums.modx.com/thread/?thread=2958 <![CDATA[Re: Hacked site: center_t.php]]> https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=5#dis-post-485898
You must update phpThumb as recommended above EVEN if you are running modx revo. I will not post the hack on the forum but please pm me if you wish to test your site.

More details: http://forums.modx.com/thread/88111/modx-security-issue]]>
davidpede Dec 23, 2013, 12:14 PM https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=5#dis-post-485898
<![CDATA[Re: Hacked site: center_t.php]]> https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=5#dis-post-467758 Everettg_99 May 31, 2013, 02:54 PM https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=5#dis-post-467758 <![CDATA[Re: Hacked site: center_t.php]]> https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=5#dis-post-467748
I got my account hacked through an old phpThumb version exploit so I'm updating my phpThumb to the last version.

Unfortunately my web host doesn't have escapeshellarg() activated for my account so I was wondering if there's a way to run the last version of phpThumb without it.

Thanks!]]>
s3nd41 May 31, 2013, 12:39 PM https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=5#dis-post-467748
<![CDATA[Re: Hacked site: center_t.php]]> https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=5#dis-post-18376 Everettg_99 Jun 28, 2011, 10:49 AM https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=5#dis-post-18376 <![CDATA[Re: Hacked site: center_t.php]]> https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=5#dis-post-18375 labr1005 Jun 28, 2011, 04:36 AM https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=5#dis-post-18375 <![CDATA[Re: Hacked site: center_t.php]]> https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=4#dis-post-18374
If you have replaced ALL the files with freshly-downloaded MODx versions, did you also replace all the user-created files? If you want to go through the MODx database, I’d look carefully at the templates to see if they were including extra JS stuff and all all the Snippets and Plugins to see if they were executing any extra code. For all those MODx snippets, paste the original Snippet code back into your database copy to ensure that you have the expected code executing and not some malicious stuff.]]>
Everettg_99 Jun 27, 2011, 01:50 PM https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=4#dis-post-18374
<![CDATA[Re: Hacked site: center_t.php]]> https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=4#dis-post-18373 I took the rather extreme step of deleting all of the existing files from the server, uploading a new copy of the modx 1.0.5 and doing an advanced reinstall using the same database.

I’m still seeing 302 redirect attempts after I login with the manager, so there must be something leftover in the database. I’ve search via phpmyadmin but I don’t see anything, and I’m not really sure exactly what to search for.]]>
mohicanlove Jun 25, 2011, 01:05 PM https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=4#dis-post-18373
<![CDATA[Re: Hacked site: center_t.php]]> https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=4#dis-post-18372 Everettg_99 Jun 21, 2011, 04:00 AM https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=4#dis-post-18372 <![CDATA[Re: Hacked site: center_t.php]]> https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=4#dis-post-18371 Thanatermesis Jun 20, 2011, 05:44 PM https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=4#dis-post-18371 <![CDATA[Re: Hacked site: center_t.php]]> https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=4#dis-post-18370 sottwell Jun 20, 2011, 03:32 PM https://forums.modx.com/thread/2958/hacked-site-center-t-php?page=4#dis-post-18370