alexplex Posted July 2, 2016 Share Posted July 2, 2016 Hello! My prestashop site has been hacked and now displays a message on the index.php from the hackers. I have changed my password in cPanel but now I wonder how I can recover my old index.php. I do not know if other files have been modified. How can I repair my index.php? Do I just upload a new index.php from the prestashop installation? Link to comment Share on other sites More sharing options...
PrestaHeroes USA Posted July 2, 2016 Share Posted July 2, 2016 (edited) first thing, put shop offline in maintenance mode, if google has not marked your site already as malicious this will save you loads of headache later. First change all ftp passwords, better yet delete them all and create new one. make sure you have up to date antivirus on your computer download, via FTP (antivirus should catch anything via FTP), or if you zip and then download site files run antiivurs against them. download and unpack your version of PS from downloads. This will be used to replace any native ps files. Check that your permissions are 755 folder 644 files 664 .htaccess file, this is common best set up for most hosting ensure your file group owner (ask hosting) is your domain name, i.e. only you group name has permissions to read/write/delete etc. Anitivurs may find offending files, that's key, but if it did not (you can do this anyway) using hosting filer manager or ftp, look at your shop files, sort on last modified, look for newly updated files, espeicilly .js. When you get it all sorted, then and only then take shop out of maintenance mode. And then you can look at one of my modules that will alert you when file changed either by ftp/hack/etc. https://www.prestashop.com/forums/topic/303132-module-prestavault-malware-trojan-virus-protection/ Good luck! Edited July 2, 2016 by El Patron (see edit history) 3 Link to comment Share on other sites More sharing options...
endriu107 Posted July 2, 2016 Share Posted July 2, 2016 You use warhouse theme? Maybe this is coincidence https://www.prestashop.com/forums/topic/540342-please-help-my-site-was-hacked/ 1 Link to comment Share on other sites More sharing options...
endriu107 Posted July 3, 2016 Share Posted July 3, 2016 On Polish forum today is also one hacked issue on shop with this theme: https://www.prestashop.com/forums/topic/539892-wysy%C5%82ka-spamu/ I think somebody found a way to hack this theme or attached modules. 1 Link to comment Share on other sites More sharing options...
tuk66 Posted July 22, 2016 Share Posted July 22, 2016 There are more vulnerable modules and PrestaShop have created some as well. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now