I think my site has been hacked

[snapchris]

I noticed that some of my product pictures have been changed. I sell guitars but some products images have been changed to pictures of shoes and perfume. Is there a way I can prevent this from happening again. Its pretty embarrassing to have people see that. Thanks for any help.

[abolabo]

it's our demo products images and i can not imagine how somebody did this. Looks like restoring of your files from old backup.
You can try to remove all thumbnails (see admin menu-> system->cache) and check.

[snapchris]

Thank you very much for the quick reply. I thought I remember seeing that AbanteCart had been updated. I didnt update manually and I dont know if it updates automatically. I also noticed that some parts of my contact form stopped working. Im wondering if the update might have had something to do with everything.

[abolabo]

AbanterCart upgrade packages does not contain any "resource" files such as images. Also it do not change any user-data.

[snapchris]

I fixed all the images and the form but now the form is showing fields that I dont even have on the form. How can I secure this site? This is getting horrible.

[snapchris]

...

[snapchris]

I cant even remove the form. It doesnt even seem like the same one. There is a different form on the category page than on the product page for some reason.

[Basara]

Hello.

This fields names are not included in any install or upgrade AbanteCart's scripts. Your problem is not related with AbanteCart upgrade.
Maybe you or someone who have access restore backup from another site?

[snapchris]

So I figured out why there were 2 different forms. Somehow a block got reactivated when all the other stuff happened. Deleted the block and its gone.