Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeGetting StartedGetting StartedNew to DNN Plat...New to DNN Plat...Inserted HTML codeInserted HTML code
Previous
 
Next
New Post
5/29/2012 5:47 PM
 

On one of my DNN 5 sites I have noticed there is some HTML being generated that shouldnt be there - whilst the output it isn't visible other than on Chrome there is a series of links to an unknown site in the HTML

The HTML is appearing across both the templates that are being used and after looking at the templates I cannot see the HTML anywhere.

Googling the URLs in question I can find hundreds of sites with the same links across PHP, ASP, .Net etc and so evidently this is some form of injected code but how do I best go about finding it and eliminating it from the site?

 
New Post
5/30/2012 6:01 AM
 
this sounds like either someone hacked your site, you installed an extension with modifies output or your hosting provider adds sth into the http output. Do you have remote access to the server?

Cheers from Germany,
Sebastian Leupold

dnnWerk - The DotNetNuke Experts   German Spoken DotNetNuke User Group

Speed up your DNN Websites with TurboDNN
 
New Post
5/30/2012 8:03 AM
 
It is on shared hosting running medium trust so only access to the server is via Helm and FTP.

The links are to fake designer goods and I know the owner of the hosting company and it certainly isnt his style. I've also looked at our other sites that are installed on the same web host but different instance of DNN and they are all fine.

I cannot see any extensions that have been added recently, all those that are there are also on the other installations of DNN which are all clean.

I dont know when these were inserted though. They dont actually display visably other than in the latest version of Chrome where they appear as a single dot which is well below the page footer so they could have been there for ages and just not noticed as I havent looked at the source.

What is the best way to find where these are coming from and delete them?
 
New Post
5/31/2012 10:09 AM
 

Is it possible that someone changed the skin (using FTP for example, which in most cases is the source of hacking DNN sites?)

You can try to reinstall the skin, and change the password(s) for the FTP account...

Best wishes
Michael


Michael Tobisch
DNN★MVP

dnn-Connect.org - The most vibrant community around the DNN-platform
 
New Post
5/31/2012 10:17 AM
 
I have looked at the two skins in questions and there is no trace of the HTML that is appearing on the site.
 
Previous
 
Next
HomeHomeGetting StartedGetting StartedNew to DNN Plat...New to DNN Plat...Inserted HTML codeInserted HTML code


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out