Gsdbbr.org URL hij - Page 1

Pedigree Database

Premium classified

This is a placeholder text
Group text

Premium classified

This is a placeholder text
Group text

Premium classified

This is a placeholder text
Group text

Premium classified

This is a placeholder text
Group text

marjorie

by marjorie on 30 December 2012 - 20:12

We are working on fixing it. I will post when the problem has been fixed. Can't believe people have nothing better to do with their time! It was hacked through an island off New Zealand and routed through Pakistan! geez:(

i worked so hard to make a venue to help improve the health of the breed and to have this happen is very upsetting.
do nt use the site till it is fixed

susie

by susie on 30 December 2012 - 20:12

Hopefully you get it fixed.
There is nothing worse than realizing that hard work was destroyed by some a%%h%%%%.

Hundmutter

by Hundmutter on 30 December 2012 - 20:12

Why on earth would anybody do this ?
Sorry to hear about it Marjorie, good luck with
getting it sorted.  A valuable resource.

marjorie

by marjorie on 30 December 2012 - 21:12

Webmaster found that php code was changed. Thankfully all the info is still there- only the URL was hijacked but the php code was changed on each page to redirect the URL! We changed our password and notified the host and are now trying to get ahold of google to   Check the site and give it their ok again. Will let you know when it's ok again. Grrrrrrr!

by bcrawford on 30 December 2012 - 22:12

Maj,

I do that for a living. Wait, not hack sites but development. For someone to put some code on your scripts that redirect to a different URL that means you had a full breach. Someone either via Telnet or FTP had to edit it.

One of three things. Either the account was hacked straight up by cracking the password or your webmaster or you had some spyware that was keylogging and captured your username/password to be able to change the script. Or even worse your host was exploited somehow and they changed more sites than yours.

Either way 2 out of the 3 means someone has your account information. Sounds like you started on the right direction by changing the passwords. The other thing is that more than likely a script has been uploaded to your account that allows them to access it over the web and do all kinds of fun (cough) things from your account. That way whatever they do looks like it is coming from your account. Things like SPAM, Telnet or SSH clients or downloading torrents etc.

So I would have your webmaster delete everything and restore it from a backup that is known clean. Those nested scripts are always obfuscated and made difficult to find but 9 out of 10 times they are not just going to put a drive by exploit and leave. They left you another present to unwrap later.

Brandon

marjorie

by marjorie on 31 December 2012 - 03:12

The host was notified. Webmaster went through the scripts, found the changes and corrected them. The password was changed. Google went through the site and gave us the all clear. However I willl be moving the site to a different host as we found out the host had other breaches. We will be moving it to the site that hosts my dm web site. The site is safe now, however:). Hexe, thanks so much for letting me know about the site being hacked

marjorie

by marjorie on 31 December 2012 - 15:12

Brandon, thanks for your input:) my webmaster alsodoes this for a living. He said your suggestions were right on and he actually did do all of your suggestions. I believe I still will move to the server that hosts my dm site as I never had a problem there!





 


Contact information  Disclaimer  Privacy Statement  Copyright Information  Terms of Service  Cookie policy  ↑ Back to top