OrdaSoft forum
Welcome, Guest
Please Login or Register.    Lost Password?
Hacked? Huge div with viagra code in template (0 viewing) 
OrdaSoft template Support
Go to bottom Favoured: 0
TOPIC: Hacked? Huge div with viagra code in template
#10444
vincebodie (User)
Fresh Boarder
Posts: 17
graphgraph
User Offline Click here to see the profile of this user
Hacked? Huge div with viagra code in template 2 Years, 11 Months ago Karma: 0  
Look at the source code of this page:

hotrodgaragesale.com

About 1/4 way down the page's source code is a giant div full of pharma links. I have no idea how it got there. It's getting injected as the page loads, it is not present if I download index.php and inspect its code.
 
Logged Logged  
  The administrator has disabled public write access.
#10451
admin (Admin)
Admin
Posts: 4861
graph
User Offline Click here to see the profile of this user
Re:Hacked? Huge div with viagra code in template 2 Years, 11 Months ago Karma: 61  
Hello,

exist 2 variants, restore site from backup and try find where from all these go and remove.

for remove you need first check what plugin-module create that.
Go to Template manager and Turn on - Template position show - in options
try check what position use your hack links and disable all nodulel for that possition.
if that not help need start turn off al lmodules and plugins, next check full sit code ...

Thanks,
Ordasoft team
 
Logged Logged  
  The administrator has disabled public write access.
#10457
vincebodie (User)
Fresh Boarder
Posts: 17
graphgraph
User Offline Click here to see the profile of this user
Re:Hacked? Huge div with viagra code in template 2 Years, 11 Months ago Karma: 0  
admin wrote:
Hello,

exist 2 variants, restore site from backup and try find where from all these go and remove.

for remove you need first check what plugin-module create that.
Go to Template manager and Turn on - Template position show - in options
try check what position use your hack links and disable all nodulel for that possition.
if that not help need start turn off al lmodules and plugins, next check full sit code ...

Thanks,
Ordasoft team


Hi, thanks for the suggestions. Here is the offending code which is at the top of the div 'wrapper':

Code:

<div id="wrapper" class="container">
             
      <div style="position:absolute; left:-2083px; top:-2274px;"><a href="xxxxxxmillerandmike.com/von/online-overnight-pharmacy">online overnight pharmacy</a><a href="xxxxxmillerandmike.com/von/celexa-online-pharmacy">celexa online pharmacy</a><a h....
....canada">real viagra from canada</a><a href="xxxxxxeasybaby.it/kew/viagra-alternative-gnc">viagra alternative gnc</a><a href="xxxxxeasybaby.it/kew/suhagra-100-reviews">suhagra 100 reviews</a><a href="xxxeasybaby.it/kew/letrozole-for-sale">letrozole for sale</a></div> <div id="globalContent">


      <div class="row-fluid">
      <div class="sidebar-left span3"> <div class="moduletable goods_nav">



Does this offer any clues? I don't see anything that stands out.

By the way, turning on Show Template Positions in Template Manager Options did not work, I had to add ?tp=2 to the URL.
 
Logged Logged  
 
Last Edit: 2013/12/20 21:38 By vincebodie.
  The administrator has disabled public write access.
#10470
admin (Admin)
Admin
Posts: 4861
graph
User Offline Click here to see the profile of this user
Re:Hacked? Huge div with viagra code in template 2 Years, 11 Months ago Karma: 61  
Hello,

your code go to site from some where. So you need defined from where.

1. that modules,
2 Plugins
3 Components
4 -some site hack

for see module positions -you need turn on that in template option !!!

If you can't turn on that in option, please try turn of modules one by one. Please turn off cache first

Thanks,
ordaSoft team
 
Logged Logged  
  The administrator has disabled public write access.
Go to top
What are you looking for?
Anti-spam question: How many eyes has a typical person?