Hi Sammie,
Thanks for the fix. i now have my site up and runing after it was hacked.
But i want to have this confirmed. what i have on my server is a bit different as follows:
xxxxxxxxxxxxxxxx
require_once('header.inc.php');
require_once($sIncPath . "xml.inc.php");
require_once($sIncPath . "constants.inc.php");
require_once($sIncPath . "apiFunctions.inc.php");
xxxxxxxxxxxxxxxx
Will it be correct to have it look like this?
require_once('header.inc.php');
if (isset($_REQUEST['sIncPath']))
die ('Hacking attempt');
require_once($sIncPath . "xml.inc.php");
require_once($sIncPath . "constants.inc.php");
require_once($sIncPath . "apiFunctions.inc.php");
FOR THE SECOND PART
- I changed the 'dir'
if (isset($_REQUEST['dir']))
die ('Hacking attempt');
Will it be correct to have it look like this?
if (isset($_REQUEST['BX_DIRECTORY_PATH_PLUGINS']))
die ('Hacking attempt');
require_once( BX_DIRECTORY_PATH_PLUGINS . 'safehtml/HTMLSax3/States.php' );
require_once( BX_DIRECTORY_PATH_PLUGINS . 'safehtml/HTMLSax3/Decorators.php' );
I want to be sure i did the right thing so that those idiots wont break me down again.
Please confirm.
As for the FATAL ERROR issue, that file said to be missing was actually in the server, so I solved it by changing the FTP software i was using to reload the files and got it right.
Ayo