A free add-on hacked my website during installation.

Permalink
FarEastForever.com

If you will go to that website, you will not see the website. Using every browser, what you will see is a black background with yellow and white software code. I have attached a screenshot.

Yesterday, during the installation process of a free add-on while in editing mode, the website instantly became frozen with that software code. There is no way to remove it, since it is only thing on the computer screen, related to that website.

I contacted the developer and got no response.

Please advise me about how that add-on can be quickly removed from the website. The add-on was called "Page Feedback".

I have been updating my websites, and noticed that there's many fabulous add-ons that are out-dated and unusable. It would be helpful if those add-ons were marked as being out-dated. Until then, I don't plan to install additional add-ons, and will only use the fabulous blocks that are available within the theme.

1 Attachment

tamarosher
 
hutman replied on at Permalink Best Answer Reply
hutman
Just to ease your mind slightly, your site was not hacked. It appears that the add-on is causing a PHP error and you have error reporting turned on (which should be turned off on a live site).

I just tested this add-on with a fresh install of 8.5.5 using PHP 7.3 and it's working just fine. Did you configure the form during the setup?

Also, what version of PHP are you using? It could be that you are using a version of PHP that C5 doesn't support and it's causing issues with this add-on.

If you have access to the command line for your site you can uninstall the package by running this command from your web root.

concrete/bin/concrete5 c5:package-uninstall page_feedback
tamarosher replied on at Permalink Reply
tamarosher
Hi. Thanks for your help? How do I get to the web root?

The website has the newest version of Concrete CMS. I didn't turn error reporting on, so it must have been on by default during the initial installation.

Would my web host company be able to help remove it?
tamarosher replied on at Permalink Reply
tamarosher
Also, I used an older, free theme instead of a new, paid theme. I liked the free theme very much, and found it to be quick and easy to use. Would the older theme be causing the problem?
hutman replied on at Permalink Reply
hutman
I'm sure your hosting company could run that command for you if you do not have SSH access to run it yourself.
mnakalay replied on at Permalink Reply
mnakalay
Feel free to contact me by private message. I might be able to help you solve this issue.