Forums

Site Hacked - Checking Components - Update from 4 to 5

ponyack 21 Sep, 2015
Hi,

my site http://hilkerscleaners.com/ runs two chrono-forms. I was hacked and my mail server fills with spam email.

I am trying to find the hack and in the process eliminate the working components.

So is there a way to update from version 4 to 5?

And how can I make sure chrono-forms are secure?

Thanks,

John
GreyHead 21 Sep, 2015
Hi John,

There is no automatic upgrade* from CFv4 to CFv5. Either (or both) will run on Joomla! 3.4

You should use serverside validation to check that any submitted data from your forms is clean and secure - please see this FAQ

Bob
ponyack 21 Sep, 2015
Hey Bob,

Thanks for the quick reply. I will check out the FAQ.

With regard to V5, can I download my existing forms and just upload them to the new version 5? Or will I need to create new forms?

John
GreyHead 21 Sep, 2015
Hi John,

You can back up the forms in CFv4 and Restore them in CFv5 but all you get is the Form HTML and it isn't structured in the same way as CFv5 HTML. If they are fairly simple I'd suggest re-building, if they are complex, then stay with CFv4 pro tem.

Bob
ponyack 21 Sep, 2015
Bob,

Here is a link to my forms http://hilkerscleaners.com/index.php/open-an-account

Would you say they are simple or complex - essentially can I load them into V5?

Also the sanitizer FAQ might be a little too technical for me. I checked the PHP HTML purifier page but the Joomla plugins were missing or out of date.

John
GreyHead 21 Sep, 2015
Hi John,

Sorry, can't see the site

403: Access Forbidden
Your location (FR) has been blacklisted.


Bob
ponyack 21 Sep, 2015
Hi Bob,

Give it a try now - I had Admin Tools engaged.

John
GreyHead 21 Sep, 2015
Hi John,

No change from here. If it's simpler please take a Form Backup using the icon in the Forms Manager and post it here and I'll take a closer look.

Bob
ponyack 21 Sep, 2015
Sorry about the blacklist - if you can try once more I think I found the setting

In any case I attached the file.

This is private content

GreyHead 22 Sep, 2015
Hi John,

I'd re-build - not a big job, and you can use Multi-Field elements to replace some of the custom code.

Here's a quick version as a starter.

Bob
This topic is locked and no more replies can be posted.