Jevents Hacked? links to casinos, etc.

Hello,

I doubt it is that JEvents has been hacked so to speak. More like you Joomla! Install.

Can you provide your JEvents support info as per .2 of the forum rules.

You will probably find your site has been hacked and you have millicious code added that when a condition is met. For example, it's quite common for hackers to implment their hacks like this, but so they only work when you come from a google search and not direct to the website.

Check your sites .htaccess for mallicious code?

If you hover over your event detail url, is it correct?

Many thanks
Tony

After having a tech from Godaddy look through my site yesterday, he told me that it looks like the JEvents module has been hacked.

They ran a Site-Lock scan on my site and removed malicious code, etc.

I just added a new event to the site a couple of hours ago, and the casino links showed up in it again.

PHP Version : 5.4.19

MySQL Version : 5.0.96-log

Server Information : Linux p3nlhg226.shr.prod.phx3.secureserver.net 2.6.32-604.30.3.lve1.3.63.el6.nfsfixes.x86_64 #1 SMP Mon Oct 26 11:56:49 MST 2015 x86_64

Fix jQuery? : Yes

Load JEvents Bootstrap CSS? : Yes

Max Input Vars ? : 2000

Club code set? : Yes  

User Agent : Mozilla/5.0 (Windows NT 6.0; rv:44.0) Gecko/20100101 Firefox/44.0  

Joomla : 3.4.8

component_com_jevents : 3.4.4

component_com_jce : 2.5.14

module_mod_jevents_cal : 3.4.4

module_mod_jevents_calendarplus : 3.3.3

module_mod_jevents_custom : 3.4.4

module_mod_jevents_filter : 3.4.4

module_mod_jevents_latest : 3.4.4

module_mod_jevents_legend : 3.4.4

module_mod_jevents_switchview : 3.4.4

layout_flatplus : 3.2.8

plugin_content_jevents : 3.4.4

plugin_finder_jevents : 3.4.4

plugin_search_eventsearch : 3.4.4

plugin_system_gwejson : 3.4.4

It looks as though there is still some malicious code on your server - if you send me login details via PM I'll see if I can find where it is.

Finally got this squared away and wanted to make sure I posted that JEvents had NOT been hacked. My site had, and for some reason it mostly manifested in the calendar.

Thanks again for your help.

Hello,

Glad to hear it! :-)

Many hanks
Tony