By apasaja on

long time ago, Some of my site experience this which the themes is not created by myself... just use it and I dont know much of the codes...

it running fine and fast.. until one day, when loading any page, it will also load this website:
welcome.quoasty.com
searchportal.information.com

i have found that the theme files has been injected with some codes. It become bigger in size... Change with Garland theme will fix this...

Now this problem is not happen anymore...

But I still dont understand how the spam codes added in the theme files
I think..maybe in the theme files, it already have encrypted codes which depending on some specific source (Many Wordpress themes have this codes... the footer message will changed depending on the source). What is your opinion?

Can Apache permission configuration protect the theme files?

Thanks in advance

Comments

potonfl’s picture

potonfl commented

Creator's computer could be infected with a virus like Virut. That kind of virus can infect web scripts based on languages such as PHP, ASP, and HTML.

When you upload that files to a website, visitors will be led to the URL embedded in the iframe code.

Jeff Burnz’s picture

Jeff Burnz commented

Wow, really, that I did not know, interesting. I might have thought the OP's host had been hacked otherwise, but that is scary.

Pimp your Drupal 8 Toolbar - make it badass.
Adaptivetheme - theming system for people who don't code.