Loaded Commerce Community

Hi, 24.07.2011 i find massive hack creloaded and oscomm system.
Configure is probably over by the trade name of the iframe. This is entered directly into the database. The problem is that of your business will be evaluated as harmful via google.com www, mozilla and it will block.

See you source code :


this <iframe src='http://willysy.com/... google analytics evulates how harmfull web.
Before google mark your site, you can clean up this <iframe through configuration/my store/Store name. When your site designated the only option is directly modify via mysql.

It's only a temporary solution, I do not know how to protect trade against the same attack, please help...

Pretty simple - upgrade (you're posting this in the 6.2 forum, a cart that is several years out of date.)
There are a ton of security things you can do to limit this sort of issue, top of the list: upgrade.

Simon

Not necessarily as simple as that.

This particular modification pretty much requires that the file manager be in place, or the FTP and/or control panel credentials be compromised. Security fixes in any release aren't going to help with that last.

Change your passwords frequently, put a crowbar in the wallet to install an SSL certificate, and delete file manager to help prevent this in future.

David