OrdaSoft forum
Welcome, Guest
Please Login or Register.    Lost Password?
Hacked? Huge div with viagra code in template (0 viewing) 

OrdaSoft template Support

Go to bottom Favoured: 0

Hacked? Huge div with viagra code in template

vincebodie (Visitor)
Posts: 0
graphgraph
User Offline
Hacked? Huge div with viagra code in template 10 Years, 3 Months ago
Karma: 0  
Look at the source code of this page:

hotrodgaragesale.com

About 1/4 way down the page's source code is a giant div full of pharma links. I have no idea how it got there. It's getting injected as the page loads, it is not present if I download index.php and inspect its code.
Logged Logged
The administrator has disabled public write access.
admin (Admin)
Admin
Posts: 8230
graph
User Offline Click here to see the profile of this user
Re:Hacked? Huge div with viagra code in template 10 Years, 3 Months ago
Karma: 101  
Hello,

exist 2 variants, restore site from backup and try find where from all these go and remove.

for remove you need first check what plugin-module create that.
Go to Template manager and Turn on - Template position show - in options
try check what position use your hack links and disable all nodulel for that possition.
if that not help need start turn off al lmodules and plugins, next check full sit code ...

Thanks,
Ordasoft team
Logged Logged
The administrator has disabled public write access.
vincebodie (Visitor)
Posts: 0
graphgraph
User Offline
Re:Hacked? Huge div with viagra code in template 10 Years, 3 Months ago
Karma: 0  
admin wrote:
Hello,

exist 2 variants, restore site from backup and try find where from all these go and remove.

for remove you need first check what plugin-module create that.
Go to Template manager and Turn on - Template position show - in options
try check what position use your hack links and disable all nodulel for that possition.
if that not help need start turn off al lmodules and plugins, next check full sit code ...

Thanks,
Ordasoft team


Hi, thanks for the suggestions. Here is the offending code which is at the top of the div 'wrapper':

Code:

<div id="wrapper" class="container">
             
      <div style="position:absolute; left:-2083px; top:-2274px;"><a href="xxxxxxmillerandmike.com/von/online-overnight-pharmacy">online overnight pharmacy</a><a href="xxxxxmillerandmike.com/von/celexa-online-pharmacy">celexa online pharmacy</a><a h....
....canada">real viagra from canada</a><a href="xxxxxxeasybaby.it/kew/viagra-alternative-gnc">viagra alternative gnc</a><a href="xxxxxeasybaby.it/kew/suhagra-100-reviews">suhagra 100 reviews</a><a href="xxxeasybaby.it/kew/letrozole-for-sale">letrozole for sale</a></div> <div id="globalContent">


      <div class="row-fluid">
      <div class="sidebar-left span3"> <div class="moduletable goods_nav">



Does this offer any clues? I don't see anything that stands out.

By the way, turning on Show Template Positions in Template Manager Options did not work, I had to add ?tp=2 to the URL.
Logged Logged
Last Edit: 2013/12/20 21:38 By .
The administrator has disabled public write access.
admin (Admin)
Admin
Posts: 8230
graph
User Offline Click here to see the profile of this user
Re:Hacked? Huge div with viagra code in template 10 Years, 3 Months ago
Karma: 101  
Hello,

your code go to site from some where. So you need defined from where.

1. that modules,
2 Plugins
3 Components
4 -some site hack

for see module positions -you need turn on that in template option !!!

If you can't turn on that in option, please try turn of modules one by one. Please turn off cache first

Thanks,
ordaSoft team
Logged Logged
The administrator has disabled public write access.
Go to top
»