Re: Help: Tiki Security / upgrade?
Loooking into it even more:
I installed 1.9.8 (found the original .tar.gz file still on the server); current version is 1.9.8.3 (which I will be installing soon).
Wondering things like
a) how did they get in? (and does 1.9.8.3 fix this?)
b) is it just the tiki files? Or has my database been compromised?
c) Is it possible that even the server has been compromised?
There are extra lines appended to my local.php where I found the redirect address to the site my user had mentioned.
From timestamps of these files, it would appear they got in on Oct 26 (or earlier...).
=(