Good Afternoon,

I have been experimenting with couch cms to see if we can use it for news releases, however we noticed that now our site has been marked as hacked with the following urls, I can not see anything wrong with the source..

Any ideas?

there are the urls that mentioned they were hacked
http://www.enterprisegrp.ca/?com_conten ... 744&view=4 2/23/15
http://www.enterprisegrp.ca/?com_conten ... 927&view=4 2/22/15
http://www.enterprisegrp.ca/?com_conten ... 636&view=4 2/16/15
http://www.enterprisegrp.ca/?com_conten ... 128&view=4 2/24/15
http://www.enterprisegrp.ca/?com_conten ... 797&view=4 1/29/15
http://www.enterprisegrp.ca/?com_conten ... 498&view=4 1/31/15
http://www.enterprisegrp.ca/?com_conten ... 066&view=4 1/30/15
http://www.enterprisegrp.ca/?com_conten ... d=0&view=4 2/19/15
http://www.enterprisegrp.ca/?com_conten ... 999&view=4 2/21/15

[KK]

Good Afternoon

I checked Google. Couldn't find the URLs you mentioned listed but, indeed, it labels your home page (http://www.enterprisegrp.ca/) as 'This site may be hacked'.

The view:source doesn't show anything out of ordinary to me.
I think the definitive answer could be given by Google itself - please use webmaster tools as explained at https://support.google.com/websearch/an ... acked&rd=1 to know exactly why Google considers the site as hacked.

That said, I have a couple of questions - the URLs seem to suggest that the site is running off Joomla. If so, I wonder how you are integrating Couch with another CMS?

Also, *all* the URLs are loading up the same page (essentially the home page http://www.enterprisegrp.ca/). Can you explain that? Perhaps these URLs are from an older installation of Joomla on your site which is now gone thus making them all point to the homepage. Perhaps this sudden change of so many pages to show the same content is what is tripping off Google? What do you say?

Hi KK.

I have try this on my couch. When i put :

Code: Select all

?com_content=en-id5&itemid=744&view=4

on my url, it result my homepage. I try with only "?" = same result. all character on shift = same result.

"/adasdasdasdasdsdas" = 404, but "?/adasdasdasdasdsdas" = homepage.

[KK]

Hi GoingMarryAsap,

I have try this on my couch. When i put :
?com_content=en-id5&itemid=744&view=4
on my url, it result my homepage.

I'll try to explain.

Suppose the URL of a template is
http://www.yoursite.com/blog.php

Now you'll remember that for a folder-view the same URL becomes
http://www.yoursite.com/blog.php?f=34

If pagination is used, the same URL might become
http://www.yoursite.com/blog.php?f=34&pg=3

In all the three cases above, it is always 'blog.php' that gets invoked. Anything after the '?' are considered the 'querystring' parameters by the web-server and are provided to 'blog.php' as values that it can choose to use (or ignore).

In Couch, the 'f' parameter is used as the folder-id while the 'pg' parameter shows which page from the paginated set to show.

So, although the 'blog.php' remains the same, the changing 'f' and 'pg' result in different content to be shown.

Now suppose we pass something like this to blog.php -
http://www.yoursite.com/blog.php?foo=32&bar=56

Again blog.php is invoked and parameters 'foo' and 'bar' are provided to it with their values.
As it happens, Couch does *not* recognize 'foo' or 'bar'.
So it ignores them both and what we are left with now is only the 'blog.php'. So we get to see the 'home-view'.

Similarly if we call blog.php as this -
http://www.yoursite.com/blog.php?com_co ... 744&view=4
The 'com_content', 'itemid' and 'view' parameters are not recognized by Couch. So again they are ignored and you get to see the 'home-view'.

Can you see what I'm hitting at?
You can pass anything after '?' but it'll take effect only if it makes any sense to the page being called.
In Joomla, the 'com_content', 'itemid' and 'view' parameters dictate which module to use and which page to show. So the URLs work in Joomla while in Couch they simply show the base template being called.

I try with only "?" = same result. all character on shift = same result.
"/adasdasdasdasdsdas" = 404, but "?/adasdasdasdasdsdas" = homepage

When we invoke http://www.yoursite.com/, we are actually invoking http://www.yoursite.com/index.php.

With "?/adasdasdasdasdsdas", you are actually invoking
http://www.yoursite.com/index.php?/adasdasdasdasdsdas
where '/adasdasdasdasdsdas' comes after the '?' and hence is passed as the querystring parameter to index.php and so you get the homepage.

With "/adasdasdasdasdsdas", you are invoking
http://www.yoursite.com/adasdasdasdasdsdas/
which is a 'non-existent' folder named 'adasdasdasdasdsdas' and you get the 404.

Hope it helps.

Thx for the great explaination KK!

So i can take a conclusion, that website owner copy paste the link here before couch installed, and we visit the website when couch installed. Thats why every url that we visit, will shown the same index page managed by couch.