Last night, the PrestaShop’s was hacked

[coal]

Co to asi tak je. Tohle mi přišlo. Takže jsem to okamžitě smazal a doporučuji i ostatním. HEHE

 

Last night, the PrestaShop’s official website, prestashop.com, was hacked, resulting in the misappropriation of a script intended for transcribing news information in the Back Office of PrestaShop stores.

 

The entire PrestaShop team dedicated ourselves to identifying and fixing this issue as quickly as possible. That fix has been completed.

 

 

Has my shop been infected?

 

This only affects PrestaShop versions 1.4/1.4.1/1.4.2/1.4.3/1.4.4, but not all shops using these versions are necessarily affected

 

If you use one of these versions, please check for any of the following symptoms:

 

A her.php file is at the root of /modules folder

A .php file different from index.php is in the upload and download folders

Your footer.tpl file has been modified

Your tools/smartyv2 folder is missing

 

 

If you fulfill one of these conditions, your shop may have been infected. However, it is easy to fix just by following the instructions listed below.

 

 

What should I do?

 

1.Change your database password (or contact your webhost if you do not know how to do it). Once you have done that, open the settings.inc.php file in your /config folder and replace your old password with the new one. See below:

2.Download the fix published by PrestaShop by clicking here

3.Upload it to the root folder of your shop with your FTP client (Filezilla, Transmit…)

4.Go to the url (sem vymazal)

5.The fix is now applied. Please do not forget to delete the herfix.php file previously uploaded at the root of your shop

6.Rename the admin folder

7.Change the password of all admins of your shop

 

 

 

If you need any help or have any additional questions, you can email us at [email protected]. You will receive an answer at the soonest.

 

The whole PrestaShop team wants to deeply thank the community for its help in identifying this issue.

[gedimazs]

 

2.Download the fix published by PrestaShop by clicking here

 

 

BY clicking WHERE?????????

[tl]

Exactly - whats the link, it wasnt in the email either but yes my shop has been hacked. Arse.

[jirpol]

To samé, co přišlo e-mailem mají na první straně On the Blog - Please Read: Security Procedure - Posted by Nebojsa Stojanovic. Hezké jméno přispívatele.

[gedimazs]

here is the link http://addons.prestashop.com/fr/herfix/

[pasko]

Hi,

 

If any one need's help fixing this issue, we will help for free

 

Regards.

[Sazuki]

Můj shop byl hacknutý, to není spam.

[Carl Favre]

Hi everyone,

 

The original thread with working links :

 

http://www.prestashop.com/forums/topic/126114-please-read-security-procedure/

 

If anyone is willing to translate it in Czech I will gladly pinned it in this forum.

[urbis]

Taky jsem měl problémy s jedním 1.4.3. Trochu jsem se divil, že na českým fóru byl klid. Asi jsem byl v čr výjimka. Každopádně jsem něco smazal, něco nahrál a už je po problému. Shop normálně běžel, ale Avast hlásil trojana.