Phoca Forum

Crap!
Sounds like A LOT OF WORK:)
Well thanks anyway.

Jan Henrik

Hi, Thank you Jan for you reply.

I find the hacked code in the source of the frame
but I don't know where I can delete this code.
In the Database ? In the source Php ?

This is the hacked code (red) :
</div><div class="phocagallery-box-file" style="height:120px; width:122px">
<center>
<div class="phocagallery-box-file-first" style="height:120px;width:120px;">
<div class="phocagallery-box-file-second">

<div class="phocagallery-box-file-third">
<center>
<a class="modal-button" title="IM_0001" href="/index.php?option=com_phocagallery&view=detail&catid=1:realisations&id=1:img0001&tmpl=component&Itemid=37" rel="{handler: 'iframe', size: {x: 680, y: 560}, overlayOpacity: 0.3}" ><img src="/images/phocagallery/thumbs/phoca_thumb_m_IMG_0001.jpg" alt="IM_0001" /></a>


</center>

EDIT: the code was removed
</div>
</div>
</center>

Thank you

Mostly the code you can find in hacked files, so you need to download all your files and search for the hacked strings...

Jan

Pretty strange, a lot of people have the same problem at the same time. I also had the same problem on my site.

Cost me some effort but I managed to 'fix' the problem, don't have the real cause though I think but it works again, so it might help the others to fix it too.

I had an image called button.gif in /libraries/joomla/cache/ which contained the code with strange url's (when downloading the original joomla package, this image doesn't exist). So the first thing I tried was deleting this file. But this hasn't solved the problem, and the image returned again after I've clicked on a thumbnail in a gallery again. So what I've done is edit the button.gif with a text editor and just removed all text, so now I have a button.gif in the folder which is 0 bytes.

Hope it's helpfull to the others with the same problem. Don't know how it happened though.

Hi,

Thank you very much Aerox,

My gallery is working again as before. My problem was the same. But I don't know if this solution will last.

Jan, I had to download all the files on my site and I had searched for the string hacked with "Search" in Windows Explorer but as the string hacked was into an image, it had not been found (I had to use another tool).

Aerox, Jan, Thanks again for your help.

luso76 wrote:Hi,

Thank you very much Aerox,

My gallery is working again as before. My problem was the same. But I don't know if this solution will last.

Jan, I had to download all the files on my site and I had searched for the string hacked with "Search" in Windows Explorer but as the string hacked was into an image, it had not been found (I had to use another tool).

Aerox, Jan, Thanks again for your help.

Today I checked again and unfortunately it didn't work anymore. Could be fixed by the same method, but you don't want to do that every day. So I hope I can find a better solution.

Hi,

For me it's the same.
I took off 2 times the text file button.gif
But a robot is to write every day in the file urls.
I think there is a security hole.
I don't know if it's related to the component Phoca.
I tried to prohibit writing to the file button.gif, but when the script tries to write
button.gif the file, I get errors on the homepage of the site.
I'll try to find the get command, which tries write to the file.
I think it's a script cache injects the script via a url in a parameter get.

in Phoca Gallery there is no such image ?

I also still don't understand the problem. The image is indeed not in the phoca gallery component folder.
You don't have this image at all in the /libraries/joomla/cache/ folder right Jan?
Maybe I have to try updating Joomla, but I'm always a bit carefull with updates because it might go wrong and the whole site is ruined.

You don't have this image at all in the /libraries/joomla/cache/ folder right Jan?

No, my cache is empty