Thread: Hacked server
View Single Post
  #2  
Old 21st December 2010, 12:07
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 34,586
Thanks: 792
Thanked 4,983 Times in 3,903 Posts
Default

Quote:
My server have many clients, and many site have Joomla engine.
Then you most likely have found the reason for the problem. Many hacks occour trough vulnerabilitys in unpatched joomla installations.

Cleaning such a hacked server is not easy and you can not be 100% sure that you found everything that the hackers modified.

My recommendataion is to do a backup of all websites and databases and then reinstall the system. Before you go live again, you should see if you can patch all joomla systems and you should consider to switch to suphp instead of mod_php. Also disabling functions in php can be used to harden a installation.

This thread might be helpful for moving the ispconfig install to a new server:

http://www.howtoforge.com/forums/showthread.php?t=2717
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote