Pasarel

Thanks guys, I'm not quite sure why I didn't tried to look in the source code in the first place. I deleted that JS and it's working fine now. BTW, my password wasn't that easy to break, mainly because it was not in English, but, well, I'm not getting into more detail Thank you again! (those crappy hackers also messed up the words with diacritics, but I'll deal with it)

To put it simply, I got hacked... again. This time, the ones I angered were a group of Bangladeshi Islamic extremists, known as "Team Haxorsistz". While visiting my site today, I was left with this message instead of my nice homepage: "rebon test" Pretty nice, eh? As you may be expecting, I didn't try to figure out "what did the author want to say", instead I immediately googled the word "rebon". I found nothing. Going deeper into the problem, I realised they also changed my site's title with "+ADw-/title+AD4-rebon testo+ADw-DIV style+AD0Alg-DISPLAY: none+ACIAPgA8-xmp+AD4-". As far as I can tell, that looks like some weird HTML combined with random letters. But, then again, what am I waiting for, I said to myself, and googled that too. Luckily, I did find some information. As I already told you, these guys are from Bangladesh and are part of Team Haxorsistz. Seems like they're either only taking down websites because their security is low, or they're doing something similar to an Internet jihad. Well, I'll confess: I don't believe in Allah or Muhammad or any other Muslim figure, but I don't see how these guys could've known about that. However, if I'm thinking about my site's security, then, indeed, it was low. So what? I also noticed my website is now significantly bigger in size, about 300 MB bigger. I guess in Bangladesh they are feeding websites more than they are feeding people. :rolleyes:/&--#62;/&--#62;/&--#62; BTW, here's the URL: http://revista-floyd.tk/ Is there anything to be done? Shall I find the hackers' stamp and throw their bodies in the Brahmaputra? :rolleyes:/&--#62;/&--#62;/&--#62; Really now, what is to be done, if anything?

Hmmm, so it's clean now, huh? That's weird, because my antivirus is still blocking the website. I guess that's not your problem, though, I think it only got into some database containing infected websites to be avoided.

Thank you, but currently I can't access my website at all. It's not even showing the "suspended" page. Also, the forum is very slow, I really don't know why, as the server monitor claims everything is alright. EDIT: The site loads now, I deleted the two files but it seems that nothing changed: my antivirus still shows a warning page when trying to load it. Am I THAT dumb?

Username: Pasarel Server: Stevie Main Domain: revista-floyd.tk Why was I suspended? Seems like my account didn't get inactive, and I don't understand what else I could've done. Oh, God, I just realised what happened. I used a picture from my website as an avatar on a high traffic forum, and that kinda balled-up your servers. Any chances to get my account back?

Hello, I'm back with a new problem. It seems that some lame-ass hackers wanted to mess up my site, injecting a some code for all the pages on my website. Take a look: http://revista-floyd.tk/ Thankfully, I got my Wordpress account back (with a changed username, I think they got into the database) and all my posts are where they should be. However, the home page (and every other page) display the message "Hacked by Valiant. Greetz: war0k" So I searched their names on the Internet. I couldn't find much about Valiant, but it seems that war0k's got some reputation. Looking at the sites he hacked, I think he's Indonesian. Also, it seems that he is part of a hacking group, named Ponorogo. I even got his email: emailwark@gmail.com . I wonder, why would someone want to hack our innocent website? I mean, we are Romanians, talking about rock music, sharing our own opinions about new albums/songs/stuff. Why would someone find something wrong with that? (many websites he puts down are talking about Indonesian politics/stuff like that, like this one: http://indonesiandefacer.org/ ). I took a look at my index.php file and it seems that he replaced it all with this: <! --- Generated by HN Deface Page Maker [ http://hacker-newbie.org ] --- > <html> <head> <link rel= "SHORTCUT ICON"href="http://i.mynicespace.com/1/152.gif"> <title> Hacked by Valiant </title> </head> <body bgcolor=#000000> <body oncontextmenu='return false;'> <br><center><img src=http://www.banklawyersblog.com/.a/6a00d8341c652b53ef017615ff8a0b970c-800wi></center> <br><center><font color=#F00000 face="Arial" size="5">Hacked by Valiant</font> <br><center><font color=#F00000 face="Arial" size="3">Hey Admin Patch Your Site !</font> <br><br> <br><center><font color="White" face="Arial" size="2"> Greetz : War0k </body> I feel kinda stupid for letting someone hack me using a generator... Would replacing the index.php with the original WP one work? If not, what other options do I have? Am I screwed? One last thing: I am not scared. Not at all. I am as calm as I can be. I know there's gonna be a way out of this. Never mind, it was way easier to recover than I thought, they simply replaced the original index.php with theirs, but please keep this thread open so we can discuss further on this subject. Why did they want to put my site down?

Hmm, it still doesn't work for me. My DNS indirectly points to Helio, through Cloudflare. However, I'll try to change my DNS configuration and remove Cloudflare. EDIT: Nope, not working. EDIT 2: Nevermind, cleared my cache and it's all fine. Thanks!

Hello, I'm facing a strange problem in here. My site seems to be down, although the server monitor says everything is fine on Stevie. Still, the only thing I can access is FTP, but that's useless, not knowing what the problem is. What can I do? I didn't install anything new on the site for the past week. It was working fine 3 days ago, when I last posted something.

Same here.

Sorry for stupid question, but what is cPanel integration for? Does it have any additional features or something? Easier setup?

No, I didn't move my files yet, but I was talking about something else. I meant that I can't access my app offline through Facebook ( https://apps.facebook.com/revistafloyd/ ), only using the direct link ( http://quiet-planet-6750.herokuapp.com/ ) even though I set up the AppCache file.

Damn, my Helio gave me a 500 then I reloaded. This way I accidentally posted this topic twice. Someone please delete it. Here's the link to the other topic: http://www.helionet.org/index/topic/11529-appcache-redirecting-anyone/

Hello, I am working on a Facebook app that uses some of the HTML5 and CSS3 features. I already did some styling stuff, like transition background and other things. Now I am trying to make the app accessible without internet connection using AppCache. It seems to be working fine offline when I'm running the app directly from Heroku (I'm using Heroku to host it, but I plan moving the files to my site hosted on Helio), but when embedded in Facebook it doesn't work anymore - something kinda obvious, because I didn't edit Facebook's AppCache. Now, my question is, can I redirect the app to Herkou before Facebook's elements load up? Using FALLBACK doesn't seem to work. Or can I also cache Facebook from my .appcache file? Thanks in advance, Pasarel

I'm afraid I found a problem in the poll. It looks like something named "Internet Explorer" is listed as a browser. I expect the original poster to fix this issue as fast as possible.

Down again. What is it happening, Helio?