Site Hacked - Checking Components - Update from 4 to 5

Hi,

my site http://hilkerscleaners.com/ runs two chrono-forms. I was hacked and my mail server fills with spam email.

I am trying to find the hack and in the process eliminate the working components.

So is there a way to update from version 4 to 5?

And how can I make sure chrono-forms are secure?

Thanks,

John

Hi John,

There is no automatic upgrade* from CFv4 to CFv5. Either (or both) will run on Joomla! 3.4

You should use serverside validation to check that any submitted data from your forms is clean and secure - please see this FAQ

Bob

Hey Bob,

Thanks for the quick reply. I will check out the FAQ.

With regard to V5, can I download my existing forms and just upload them to the new version 5? Or will I need to create new forms?

John

Hi John,

You can back up the forms in CFv4 and Restore them in CFv5 but all you get is the Form HTML and it isn't structured in the same way as CFv5 HTML. If they are fairly simple I'd suggest re-building, if they are complex, then stay with CFv4 pro tem.

Bob

Bob,

Here is a link to my forms http://hilkerscleaners.com/index.php/open-an-account

Would you say they are simple or complex - essentially can I load them into V5?

Also the sanitizer FAQ might be a little too technical for me. I checked the PHP HTML purifier page but the Joomla plugins were missing or out of date.

John

Hi John,

Sorry, can't see the site

403: Access Forbidden
Your location (FR) has been blacklisted.

Bob

Hi Bob,

Give it a try now - I had Admin Tools engaged.

John

Hi John,

No change from here. If it's simpler please take a Form Backup using the icon in the Forms Manager and post it here and I'll take a closer look.

Bob

Sorry about the blacklist - if you can try once more I think I found the setting

In any case I attached the file.

This is private content

Hi John,

I'd re-build - not a big job, and you can use Multi-Field elements to replace some of the custom code.

Here's a quick version as a starter.

Bob