How to solve this php issue ?

Discussions of secure PHP coding. Security in software is important, so don't be afraid to ask. And when answering: be anal. Nitpick. No security vulnerability is too small.

Moderator: General Moderators

Post Reply
Petebright
Forum Newbie
Posts: 7
Joined: Thu May 28, 2009 5:53 am

How to solve this php issue ?

Post by Petebright »

My web site had the warning message from Google - This site may harm your computer.

The following advice from my web hosting company :

-As I see there is an alert when trying to navigate this site, this is due to the fact that there is a Trojan Horse installed in your PHP coding.
-I suspect your site was using a very old version of PHP that is no longer supported nor updated.

This is the information from Google :

-Site is listed as suspicious - visiting this web site may harm your computer.
-Part of this site was listed for suspicious activity 1 time(s) over the past 90 days.
-Of the 2 pages we tested on the site over the past 90 days, 2 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-05-24, and the last time suspicious content was found on this site was on 2009-05-24.
Malicious software includes 5 exploit(s).
-No, this site has not hosted malicious software over the past 90 days.
-In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

I'd tried to installed my backup php file,but to no avail.

Please kindly advice on how to solve this problem.
Thank you.
User avatar
kaisellgren
DevNet Resident
Posts: 1675
Joined: Sat Jan 07, 2006 5:52 am
Location: Lahti, Finland.

Re: How to solve this php issue ?

Post by kaisellgren »

That sucks. I bet someone else than you has got an access on your system and setuped something that Google identifies as malicious. You just gotta clean up your entire system and make sure to update all scripts you have there. If you have custom coded scripts, you have to check them through. The bad thing is that it might take 2-3 months for Google to remove that suspicious mark for your site.
Petebright
Forum Newbie
Posts: 7
Joined: Thu May 28, 2009 5:53 am

Re: How to solve this php issue ?

Post by Petebright »

Hi kaisellgren,

Many thanks for your prompt replied to my concerns over php issue.As my web hosting company mentioned the following :

-" I suspect your site was using a very old version of PHP that is no longer supported nor updated."

As I'm new to PHP,may I know how to differential whether my site is using old version of PHP ?

Thank you.
User avatar
kaisellgren
DevNet Resident
Posts: 1675
Joined: Sat Jan 07, 2006 5:52 am
Location: Lahti, Finland.

Re: How to solve this php issue ?

Post by kaisellgren »

Petebright wrote:may I know how to differential whether my site is using old version of PHP ?
Your web hosting company knows what version of PHP you are running, but this should not be the problem.
Paul Arnold
Forum Contributor
Posts: 141
Joined: Fri Jun 13, 2008 10:09 am
Location: Newcastle Upon Tyne

Re: How to solve this php issue ?

Post by Paul Arnold »

I was using a host called 3ix and malicious code got uploaded to my directories.

I only had flat HTML / CSS files on there and hadn't touched the permissions.

I talked to the hosts and they tried to blame me and then told me to move to another host.
I had a quick search on Google and it turns out that they're pretty much running their own phishing scams through their users' servers which in turn gets them blocked by Google.

Beware of cheap hosting.
User avatar
kaisellgren
DevNet Resident
Posts: 1675
Joined: Sat Jan 07, 2006 5:52 am
Location: Lahti, Finland.

Re: How to solve this php issue ?

Post by kaisellgren »

Paul Arnold wrote:they told me to move to another host.
I think you should take the piece of advice...
Paul Arnold
Forum Contributor
Posts: 141
Joined: Fri Jun 13, 2008 10:09 am
Location: Newcastle Upon Tyne

Re: How to solve this php issue ?

Post by Paul Arnold »

kaisellgren wrote:
Paul Arnold wrote:they told me to move to another host.
I think you should take the piece of advice...
Oh believe me, my account's been cancelled.
Steep learning curve.
Post Reply