Author Topic: I think my site has been hacked  (Read 5687 times)

Offline snapchris

  • Newbie
  • *
  • Posts: 17
  • Karma: +1/-0
    • View Profile
I think my site has been hacked
« on: July 30, 2015, 05:14:29 PM »
I noticed that some of my product pictures have been changed. I sell guitars but some products images have been changed to pictures of shoes and perfume. Is there a way I can prevent this from happening again. Its pretty embarrassing to have people see that. Thanks for any help.

Offline abolabo

  • core-developer
  • Administrator
  • Hero Member
  • *****
  • Posts: 2048
  • Karma: +319/-13
  • web for all, all for web!
    • View Profile
    • AbanteCart
Re: I think my site has been hacked
« Reply #1 on: July 30, 2015, 05:51:36 PM »
it's our demo products images and i can not imagine how somebody did this. Looks like restoring of your files from old backup.
You can try to remove all thumbnails (see admin menu-> system->cache) and check.
“No one is useless in this world who lightens the burdens of another.”
― Charles Dickens

Offline snapchris

  • Newbie
  • *
  • Posts: 17
  • Karma: +1/-0
    • View Profile
Re: I think my site has been hacked
« Reply #2 on: July 30, 2015, 06:52:52 PM »
Thank you very much for the quick reply. I thought I remember seeing that AbanteCart had been updated. I didnt update manually and I dont know if it updates automatically. I also noticed that some parts of my contact form stopped working. Im wondering if the update might have had something to do with everything.

Offline abolabo

  • core-developer
  • Administrator
  • Hero Member
  • *****
  • Posts: 2048
  • Karma: +319/-13
  • web for all, all for web!
    • View Profile
    • AbanteCart
Re: I think my site has been hacked
« Reply #3 on: July 31, 2015, 03:58:57 AM »
AbanterCart upgrade packages does not contain any "resource" files such as images. Also it do not change any user-data.
“No one is useless in this world who lightens the burdens of another.”
― Charles Dickens

Offline snapchris

  • Newbie
  • *
  • Posts: 17
  • Karma: +1/-0
    • View Profile
Re: I think my site has been hacked
« Reply #4 on: August 02, 2015, 09:22:44 PM »
I fixed all the images and the form but now the form is showing fields that I dont even have on the form. How can I secure this site? This is getting horrible.

Offline snapchris

  • Newbie
  • *
  • Posts: 17
  • Karma: +1/-0
    • View Profile
Re: I think my site has been hacked
« Reply #5 on: August 02, 2015, 09:23:25 PM »
...

Offline snapchris

  • Newbie
  • *
  • Posts: 17
  • Karma: +1/-0
    • View Profile
Re: I think my site has been hacked
« Reply #6 on: August 02, 2015, 09:26:07 PM »
I cant even remove the form. It doesnt even seem like the same one. There is a different form on the category page than on the product page for some reason.
« Last Edit: August 02, 2015, 09:33:47 PM by snapchris »

Offline Basara

  • Administrator
  • Hero Member
  • *****
  • Posts: 5819
  • Karma: +274/-2
    • View Profile
Re: I think my site has been hacked
« Reply #7 on: August 03, 2015, 02:50:36 AM »
Hello.

This fields names are not included in any install or upgrade AbanteCart's scripts. Your problem is not related with AbanteCart upgrade.
Maybe you or someone who have access restore backup from another site?

Offline snapchris

  • Newbie
  • *
  • Posts: 17
  • Karma: +1/-0
    • View Profile
Re: I think my site has been hacked
« Reply #8 on: August 07, 2015, 11:54:14 PM »
So I figured out why there were 2 different forms. Somehow a block got reactivated when all the other stuff happened. Deleted the block and its gone.

 

Database Error

Please try again. If you come back to this error screen, report the error to an administrator.