View Full Version : Script was hacked...please help

September 16th, 2006, 03:19 PM
Hi there,

My Reviewpost script was recently hacked (the usual, a pop-up with "hacked by so-and-so" plus a trojan virus installed in one of the Reviewpost directories, etc.).

My question is this: is there supposed to be a subdirectory named "pro" inside the "data" directory?

There are two files in it without extensions, "prox" and "xh." I can't delete them or change permissions on them.

Are these two files supposed to be there and is that directory supposed to be there?

Chuck S
September 16th, 2006, 05:14 PM
There is no pro directory suppose to be there.

what do you mean the script was hacked there are no security vulnerabilities with our files that have been reported. Looks like they used a 777 directory as a place to begin but what they did was probally independent of the reviewpost application itself.

Without more exact information I can't respond further

September 17th, 2006, 05:38 PM
I changed the permissions on the data directory to 755...it was 777 indeed. This morning I found another subdirectory in there that didn't belong, but I was able to delete it (it was called "info").

I've notified my host about the "pro" directory. Still can't delete it or the two files inside it.

Is there anything else I can do? I'm already planning on switching hosts. I haven't been happy with this one for a long time.

I have a Photopost script too, I changed the permissions on the data and uploads directories there to 755 as well.

I know some programming but I'm clueless about hackers. We're running a small site that basically makes just enough money to pay for itself, we can't afford expensive solutions.

Again thank you for responding so quickly.

Chuck S
September 17th, 2006, 05:55 PM
Our data directory is suppose to be 777 for file uploads to happen.

September 22nd, 2006, 12:22 PM
I've moved my site to a better host. I'd like to renew both our Photopost and ReviewPost scripts...I went to do that, but now I'm confused. Does one renewal cover both PhotoPost and ReviewPost? If you purchase two renewals, does that mean two years of renewal for both scripts, or one year of renewal for each script?

Hope that made sense.

September 29th, 2006, 09:52 PM
I think my brain was a bit fried from fixing up the site. I got both scripts upgraded and installed fine.