I've already tried to reduce the surface of attack of my homepage by removing all un-needed components, modules, mambots but here is below what I've found into the log files...

• com_securityimages < 3.0.5 use at least a version  > 3.0.6
• com_hashcash < 1.2.1 use at least a version  > 1.2.2
• com_bayesiannaivefilter has been developed but never release as a component, but it is still available at Joomla forge developer tree.

Defacing Tool 2.0 by xxxxxx

1. For com_bayesiannaivefilter sorry guys but I do not have this plugins nor it has ever been released in the wild. com_securityimages or com_hashcash, just Upgrade!
2. If you manage a web host for which you are certain does not require the use of remote includes, you can disable that functionality in your php.ini configuration file by modifying the following variable. /etc/php.ini  allow_url_fopen = Off

• /var/www/vhosts/waltercedric.com/subdomains/wiki/httpdocs/com_hashcash
• wiki/administrator/
• [Tue Aug 01 21:09:46 2006] [error] [client 200.120.37.70] user  not found: /administrator/components/com_uhp/uhp_config.php
• [Tue Aug 01 20:43:03 2006] [error] [client 200.120.37.70] user  not found: /administrator/components/com_colophon/admin.colophon.php
• [Mon Jul 31 20:11:25 2006] [error] [client 88.233.220.125] user  not found: /administrator/components/com_mgm/help.mgm.php

Comments

Add New Search RSS

messy Guest (84.74.93.xxx) 2006-08-24 21:29:21 switching allow_url_fopen = Off does come with some side effects though, some components won't work and afaik it brings some Joomla cache problems. The best thing to do as afaik is to keep everything up-to-date and read the Joomla forum, the security one, the htaccess part is very good and easy to do for anyone. You make some great addons for Joomla Cedric but no offence but your website is very chaotic and half of it isn't working so maybe this is partly debit to you being under attack. Chaos usually means there must be lose ends. But as I said before, your a credit to the Joomla development, and I really appreciate and admire your work! --------Cedric Walter -------- A lot of ip get currently blacklisted by mod_evasive, spamd process are killing my server cpu (spam assasin process), I have port scan and a lot of things which have nothing to do with joomla and the number of patch i can apply, It seems some hac... Reply | Quote 0   0

Write comment
Name:
Email:	do not notifynotify
Title:
UBBCode:	-color-aquablackbluefuchsiagraygreenlimemaroonnavyolivepurpleredsilvertealwhiteyellow -size-tinysmallmediumlargehuge
Please input the anti-spam code that you can read in the image.

Powered by !JoomlaComment 3.20

3.20 Copyright (C) 2007 Alain Georgette / Copyright (C) 2006 Frantisek Hliva. All rights reserved."