Joomla WordPress eval base64_encode hack fixes

How did I encounter it eval base64_encode hack

I got to know this hack after I was contacted by my hosting provider telling me that one of my WordPress/Joomla websites was generating a lot of spam traffic. If you are running your own host you might discover it by monitoring the e-mail traffic generated by your server or if the load on the server has unnaturally increased.

The issue spread quite quickly and soon many others websites got hacked. I also got a lot inquiries from friends having the same issue.

How does it happen?

Sites are hacked after an attacker sends through request a piece of code that gets executed once received. That is usually done through untrusted plugins, or flaws in the CMS software.

The attack usually sneaks a line of bad code in some of the CMS’s original files. Usually in the beginning of the files, could also be in the middle. In general they try to replace a line starting with <?php with a line that has many blank spaces followed by something that usually looks like this:

eval(base64_encode('Zwnkjlhfk....'))
Read More

Gis Analytics

Online GIS solutions using Open GPL software to demonstrate analysis of spatial data!

 

This site was built using Joomla and a Rocketheme template on virtual Debian server.

Artostour

Artostour are a Bulgarian company for tourist transport. They also rent cars and provide operative leasing for their customers. The project was built with Joomla and a Rocket Theme Template. There is also a custom made module for tracking car repairs, consumables and spare parts.

Туристически транспорт

Saving energy website

Energysaver.bg is the website of the company Energy Saver Bulgaria. Energy Saver Bulgaria are an distributor of the energy saving box, which plugged in the power supply network provides energy saving up to 30 %.  The website is built with Joomla on a Rockettheme Template.

Уред за икономия на ток

Hair game website

The hair game project is already up for couple of years now. It is a flash based web tool that helps the visitor to try new hairstyles with new colors by uploading his own photograph. This hair game software is useful, because it helps you change style and find which is most appropriate for you.  To get the best results, the person on the picture must be facing the camera, the face should upright, hair must be combed back.

The website has four language versions. Like Portuguese – Cabelos Virtuais and a French version Coiffure virtuelle.

Categories