i checked my files and saw index.html changed to index.html.bak.bak and there was a index.php
This strange files have some encrypted code. Such as this: index.php
This case brokes my other php web apps. Some of my laravel apps index files got injected with these lines
This is not Hype related, though it really, really sux if my initial reaction to this is true: your account is hacked someway. (This is not on your local server, right?)
Assuming you’re hacked and this is not flunky server behavior you now cannot trust a single file on that server. I would start by contacting your hosting provider (I pray it’s not godaddy) and figure out HOW they got into your account and plug that hole.
Secondly and this is going to hurt, the only way to be really sure after you changed all your passwords, is to start over. Wipe everything and rebuild from the ground up because you cannot know what they touched. You might get “lucky” and this crap is only in a few files which you may be able to replace with older backups but like I wrote you don’t know what’s been corrupted.
- Contact hosting provider
- Plug security hole
- Wipe the server and start over if you don’t wipe you need to check everything, databases, .htaccess file etc. and get rid of garbage code.
1 Like