4images Forum & Community
4images Modifications / Modifikationen => Requests for paid modifications / Jobbörse => Topic started by: Joao on May 13, 2010, 11:54:05 AM
-
Hello
After more than three years of use that this gallery without any major problems, that I am facing a big problems that I can not be solved. The gallery works correctly except when trying to connect, after entering the username, password and validate it falls on a blank page.
Thank you for the help
-
Can you be more specific >? tnx !
-
How can I explain, I do not know much English translation I did with Google, the gallery works correctly, you can view all pages, put comments, vote for each image, I have access to the administration but only by going directly to the address ... / admin.
By cons, if I enter a user name and password, even a fake, and when I click the button LOG IN, I have a blank page or nothing happens.
You can try going to this address:
http://www.bellesimages.com/galerie/index.php?template=connexion&l=english
Strange, meanwhile, I received this email:
" Hi, if you can send me your FTP info, your admin name and password 4images (new admin account), I Could Investigate Further and Perhaps this problem fix it for you if you'd like for free.
Regards.
Thunderstrike. "
My site shall have been hack?
-
The login problem could be due to some hacks (not necessarily related to 4images). Some users had this kind of problem before. The last one was due to hacked WordPress script, which modified all 4images .php files with trojan.
Since you are using quiet outdated 4images, did you install ALL Bug Fixes & Patches (http://www.4homepages.de/forum/index.php?board=17.0) for your version?
As of email you've received, this is strange and I would not trust it if I were you. Yes, we do have a member Thunderstrike (http://www.4homepages.de/forum/index.php?action=profile;u=20285) (who hasn't been logged in here for 2.5 years) but, any kind of such requests would be done through this forum's personal messaging system, not email.
Look into your .php files and see if there something strange (usually at the beginning, a very long line).
-
actually, I found on the first line of each file .php this:
<?php
/**/eval(base64_decode('aWYoZnV.....REMOVED.....yk7fX19'));
?>
that are enough to remove it for you back in order?
from the mail received, it will have no answer from me.
-
Yes, that is a trojan. Remove it and scan all files for any similar lines.
-
thank you
I'll do, I will give new
-
I finally managed to find time to clean all the files. Php
everything works properly.
Again, thank you for the help
:D