Magento Security

[tatva199]

We have one magento store in community version 1.9.1

This is the url of store.

https://beadsvenue.com.au/

We found one problem before one day that around 5000 spam products are imported. 

Can anyone suggest possible solution for this?

We already changed password of admin panel and cpanel / FTP

But how can this happen?

[Tom Robertshaw]

Hi, it does sounds like your installation has been compromised. 

I would recommend as you have done:

- Change all admin passwords

- Change server access credentials

- Ensure you have all security patches installed

- Review all code to ensure that no hacked code remains

- Review admin area configuration such as the Miscellaneous scripts section to ensure nothing untoward has been placed in there.

- If you can, check that no additional database triggers have been added.