Been hacked !! . . . or more disturbingly, don't know if you've been hacked !!

                             . . . or HOW TO DETECT If ANY FILES HAVE BEEN MODIFIED !! 

Help is at hand, Audit_FS is a basic security tool that allows website owners, developers & administrators to easily scan through their Joomla!^® files and do a hash check on each file to see if they are the same as the original files from Joomla.org (ie have not been modified) and check if any of the core Joomla!^® files are missing. PLUS, it will also run through all the permissions of the files and directories and tell you if any are not the prescribed 755 for directories or 644 for the files.

Audit File System features :- Monitor and review changes to Joomla!® core file system Audit Folder server permissions Quickly scan through thousands of files Security control for Joomla!® to help thwart attacks Checking for inappropriate modifications Runs independantly - No need to install it as an extension Layouts match your version of Joomla!®

 

If you run Audit_FS after your very first initial install of a Joomla!^® site, you can ensure that all the files you uploaded have transferred properly to the web server.

You can also run this tool after every Joomla!^® update to see if any files that are no longer needed have been removed. 

Audit_FS can also be used to monitor your own changes to core Joomla!^® files. Before updating to a new Joomla!^® version you can see which Joomla!^® files you have made changes too...

To run :- Download the zip file of the Joomla!^® version you are currently running

            - extract the zip file

             - upload (ftp) the two files into the root directory of your Joomla!^® installation.

            - and run in your browser as http:///www.mydomain.com/audit_fs_J3.php
                                                     http:///www.mydomain.com/audit_fs_J2.php
                                                 or http:///www.mydomain.com/audit_fs.php
                              (changing mydomain.com to whatever your website domain is)

           - important: DELETE the two Audit_FS files after your have finished your check.
                                 If you leave them in your root directory anyone can run them....

As a basic security tool Audit_FS is designed to perform audits of only your Joomla!^® files, as well as, checking your file and directory permissions. It does not check for any changes or hacking in your database records nor does it check any files from extensions that you may have installed. The audit report will also ignore .htaccess, robots.txt, configuration.php, configuration.php-dist and copyright.php.