• caraboy
  • New community member
  • Offline
  • Registered: 2012-01-27
  • Posts: 4

Topic: Strange "V2:error:8" on login

Hello all!

First of all, as this is my first post, would like to say I like wolf for it`s simplicity, and that I migrated from wordpress to this for every day use.

But today, after a 3 month usage in production mode, I could not login to my WolfCMS installation. On entering username and password, I would get a blank page with a V2:error:8.

After google-ing, I found out it might be a hack-ing attempt, and compared the local installation with the remote one, and, my worst fear came true:

In /wolf/plugins/comment/ there was a new file, called menu.php, that contained some base64 encoded commands" <?php eval(base64_decode(rawurldecode('JHNob2dvID0gMTsKLy....

This file was then run by issuing a  */ @include_once("plugins/comment/menu.php"); from the utils.php file in the /wolf directory.

The issue was similar with this one: http://forum.joomla.org/viewtopic.php?p=2666260

Now, I restored my Wolf Installation. How can I see if this is a wolf cms issue, or a server misconfiguration (I updated the server with the latest packages, it`s ubuntu with auto-update security)?

Thank you, and waiting for your input.

Thumbs up

2 Reply by David

  • David
  • Wolf CMS support
  • Offline
  • From: Edinburgh, UK
  • Registered: 2009-07-16
  • Posts: 1,700
  • User Karma: 15

Re: Strange "V2:error:8" on login

Hi caraboy - and welcome to the Wolf forums! Glad you're enjoying Wolf, but sorry to hear you've had some grief.

We take security very seriously, which is why the 0.7* release had "security hardening" as its focus. Your particular issue reminded me of another discussed in the forum a while back. I don't know how relevant that thread will be for your concerns.

You'd get a much more helpful reply from Wolf's Lead Dev, but he's just away for a couple well-earned weeks of vacation. Perhaps others will have some insight on this one.

It sounds like you're doing your own hosting, otherwise I'd encourage you to raise a support ticket with your provider. Also, do of course ensure that permissions are set as tightly as possible.

David's Website

Thumbs up

  • caraboy
  • New community member
  • Offline
  • Registered: 2012-01-27
  • Posts: 4

Re: Strange "V2:error:8" on login

Hello,

Thank you for your answer! Indeed, I run my own server, and I try to keep it as secure as possible.

It seems my problem looks like something in the post you mentioned. I tried to verify permissions, passwords, etc, just in case.

Thumbs up