Forums

Hi,

Joomla 1.5.26
Chronoforms 3.2

Our hosting provide ran a script to find malicious files and the file components/com_chronocontact/chronocontact.html.php came back as being infected. I compared the version on the server with the downloaded version on your site and they are the same. I noticed that there is a line around line 196:

		<?php
			eval(base64_decode('JGRvY3VtZW50ID0mIEpGYWN0b3J5OjpnZXREb2N1bWVudCgpOw0KJGRvY3VtZW50LT5hZGRDdXN0b21UYWcoJGhlYWRlcl9jb2RlKTsNCmVjaG8gJE15Rm9ybS0+YWRkaGFzaCgpOw=='));

Is this code supposed to be in the file or has the files on your server been compromised?

Thank you.

Hi rlab,

It isn't hacked, please just white list the file (I think that there are a couple of CF files with similar code in them) and carry on as normal.

Bob