Website has been hacked
Permalink
In September we had the top navigation links on our website switch to cheap ugg boots randomly on different pages at different times. We had our web developer look at it to see what was going on but he didn't find any problems. After awhile it just went away.
In January, we upgraded to Concrete 5.6.2 because our webhost was updating their PHP and our ugg boots has returned randomly again. Any help or direction on what to do to correct this would be extremely welcome.
I have attached a screen shot of our page in all of it's ugg beauty.
My website address is Spokaneclub.org
In January, we upgraded to Concrete 5.6.2 because our webhost was updating their PHP and our ugg boots has returned randomly again. Any help or direction on what to do to correct this would be extremely welcome.
I have attached a screen shot of our page in all of it's ugg beauty.
My website address is Spokaneclub.org
Looks like you may have something locally running in your browser overriding the links? Have you checked this with multiple devices? Because it does not appear like that for me. See attached...
This has been the most frustrating part, it happens randomly and most often in the Athletics tab it has never happened on the home page. When I see that a page has changed I login edit the page, save, refresh my browser and it disappears. Everything will be fine for awhile and then suddenly the pages will be messed up again.
I thought it might also be an internal/personal computer issue for awhile but other people outside the network and even state have reported it as well.
I thought it might also be an internal/personal computer issue for awhile but other people outside the network and even state have reported it as well.
I would wait till you see an occurrence of this. If that happens, get the page source and look for the foreign code. Find something that clearly identifies it and run a search trough all your conrete5 files for it. Can also be a call to another domain.
If you got hacked you should be able to find it somewhere in your files. If that's the case, remove it. The next step would be to find out how it got there and where the security hole is.
Consider switching to PHP over Fast-CGI if you haven't already. Much more secure.
If you got hacked you should be able to find it somewhere in your files. If that's the case, remove it. The next step would be to find out how it got there and where the security hole is.
Consider switching to PHP over Fast-CGI if you haven't already. Much more secure.
