Post by doktorek » Tue Aug 22, 2017 1:35 pm

Ok...Im moving a site to a staging subdirectory to mess with it. After I moved the site - I noticed that all my images got replaced with image below.

There are no more images .....its just links to their xyz website.

Did I get hacked? I guess so. But the main site doesnt have this issue. So that is weird. Only the copy /pasted subdirectory I just created has this issue.
Is this database injection? Or ftp injection? I scanned the site with malware scanner but nothing.
Even if I press on little "HOME" icon from the admin site - I get linked to their website.

Can anyone help me to find the source. Did anybody ran into this before?
Thanks.
bts, htaccess looks clean.

Attachments

no_image-40x40.png

no_image-40x40.png (37.55 KiB) Viewed 383 times


New member

Posts

Joined
Thu Apr 28, 2016 8:40 pm

Post by paulfeakins » Tue Aug 22, 2017 4:57 pm

It could be that your web host display a custom image when someone requests an image that doesn't exist.

Test this theory by browsing to www.yourdomain.com/non-existant-image.jpg

For quick, professional OpenCart support please email info@antropy.co.uk


User avatar
Expert Member

Posts

Joined
Mon Aug 22, 2011 11:01 pm
Location - Reigate, Surrey, United Kingdom

Post by doktorek » Tue Aug 22, 2017 11:32 pm

It cant be because when you are in the backend - and Click "show store homepage" it takes me to that xyz hackers site. That is why I dont knwo where the injection is.

New member

Posts

Joined
Thu Apr 28, 2016 8:40 pm

Post by webcorvo » Tue Aug 22, 2017 11:43 pm

doktorek wrote:
Tue Aug 22, 2017 11:32 pm
It cant be because when you are in the backend - and Click "show store homepage" it takes me to that xyz hackers site. That is why I dont knwo where the injection is.
Can you send me the url of your store?

Opencart Developer - For custom work and support contact @ webcorvo@gmail.com


User avatar
Active Member

Posts

Joined
Mon Mar 20, 2017 11:42 pm
Location - Lisbon, Portugal

Post by doktorek » Fri Aug 25, 2017 8:53 pm

I was able to revert to last backup and make it go away. I believe it was a plugin I downloaded from the forum here.

New member

Posts

Joined
Thu Apr 28, 2016 8:40 pm

Post by webcorvo » Fri Aug 25, 2017 8:55 pm

doktorek wrote:
Fri Aug 25, 2017 8:53 pm
I was able to revert to last backup and make it go away. I believe it was a plugin I downloaded from the forum here.
Great ;)

Opencart Developer - For custom work and support contact @ webcorvo@gmail.com


User avatar
Active Member

Posts

Joined
Mon Mar 20, 2017 11:42 pm
Location - Lisbon, Portugal
Who is online

Users browsing this forum: No registered users and 45 guests