[Skip to main content](#vessel-content) # File Insertion ## - **[saejangracer](/forum/user/41055-saejangracer "View saejangracer's Profile")** - [![saejangracer's Avatar](https://www.hikashop.com/media/kunena/core/svg/person.svg)](/forum/user/41055-saejangracer "View saejangracer's Profile") Topic Author - [ Offline](/forum/user/41055-saejangracer) Less More - Posts: 25 - Thank you received: 2 - - 9 years 11 months ago [\#256871](#256871) by [saejangracer](/forum/user/41055-saejangracer "View saejangracer's Profile") *[File Insertion](/forum/25-install-update/887787-file-insertion#256871 "-- HikaShop version -- : 2.6.4 Hi Hikashop, Have recently discovered 2 Hikashop files modified on my site but not by me: 1. /administrator/components/com_hikashop/extensions/mail.php I checked the last backup and this file didn't exist in this location. The content of the file is a PHP code to upload, move and rename a file. 2. /administrator/components/com_hikashop/extensions/plg_hikashop_massaction_category/indexa.html I deleted this file because it contains a URL to a malware source file. What should I do with the mail.php file? Is it a legitimate hikashop file in the right place, or was it maliciously inserted? Also does this mean there's an open vulnerability in Hikashop 2.6.4 for the insertion to happen? Thank you =)")* was created by *[saejangracer](/forum/user/41055-saejangracer "View saejangracer's Profile")* -- HikaShop version -- : 2.6.4 Hi Hikashop, Have recently discovered 2 Hikashop files modified on my site but not by me: 1. /administrator/components/com_hikashop/extensions/mail.php I checked the last backup and this file didn't exist in this location. The content of the file is a PHP code to upload, move and rename a file. 2. /administrator/components/com_hikashop/extensions/plg_hikashop_massaction_category/indexa.html I deleted this file because it contains a URL to a malware source file. What should I do with the mail.php file? Is it a legitimate hikashop file in the right place, or was it maliciously inserted? Also does this mean there's an open vulnerability in Hikashop 2.6.4 for the insertion to happen? Thank you ![=)](/smile.gif "=)") --- Site building and troubleshooting [ www.hikashop.com/forum/product-category-...product-display.html](https://www.hikashop.com/forum/product-category-display/886962-editing-view-for-custom-front-end-product-display.html) (open) Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzI1LWluc3RhbGwtdXBkYXRlLzg4Nzc4Ny1maWxlLWluc2VydGlvbj90bXBsPW1hcmtkb3du) or [Create an account](/component/users/registration?Itemid=101) to join the conversation. - **[nicolas](/forum/user/63-nicolas "View nicolas's Profile")** - [![nicolas's Avatar](https://www.hikashop.com/media/kunena/avatars/resized/size144/users/avatar63.png?1793428657)](/forum/user/63-nicolas "View nicolas's Profile") - [ Away](/forum/user/63-nicolas) Less More - Posts: 86555 - Thank you received: 14304 - - 9 years 11 months ago [\#256886](#256886) by [nicolas](/forum/user/63-nicolas "View nicolas's Profile") Replied by *[nicolas](/forum/user/63-nicolas "View nicolas's Profile")* on topic *[File Insertion](/forum/25-install-update/887787-file-insertion#256886 "-- HikaShop version -- : 2.6.4 Hi Hikashop, Have recently discovered 2 Hikashop files modified on my site but not by me: 1. /administrator/components/com_hikashop/extensions/mail.php I checked the last backup and this file didn't exist in this location. The content of the file is a PHP code to upload, move and rename a file. 2. /administrator/components/com_hikashop/extensions/plg_hikashop_massaction_category/indexa.html I deleted this file because it contains a URL to a malware source file. What should I do with the mail.php file? Is it a legitimate hikashop file in the right place, or was it maliciously inserted? Also does this mean there's an open vulnerability in Hikashop 2.6.4 for the insertion to happen? Thank you =)")* Hi, Both of these files don't exist by default in HikaShop. So they were indeed maliciously inserted. Does that mean that there is an open vulnerability on your website ? It's highly likely yes. Maybe you updated your extensions/Joomla in the mean time and that vulnerability has been closed already. The best would be to contact a security specialist like aesecure in order to check on it. Does that mean that there is an open vulnerability on HikaShop 2.6.4 ? Not at all. It could be, but in that case, it would likely have already been reported and fixed, and many other websites would have been infected, especially ours. So far, we had only one security issue reported and fixed in 7 years (and it was a few years ago). We try really hard to code in a secure way. Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzI1LWluc3RhbGwtdXBkYXRlLzg4Nzc4Ny1maWxlLWluc2VydGlvbj90bXBsPW1hcmtkb3du) or [Create an account](/component/users/registration?Itemid=101) to join the conversation. - **[saejangracer](/forum/user/41055-saejangracer "View saejangracer's Profile")** - [![saejangracer's Avatar](https://www.hikashop.com/media/kunena/core/svg/person.svg)](/forum/user/41055-saejangracer "View saejangracer's Profile") Topic Author - [ Offline](/forum/user/41055-saejangracer) Less More - Posts: 25 - Thank you received: 2 - - 9 years 11 months ago [\#257001](#257001) by [saejangracer](/forum/user/41055-saejangracer "View saejangracer's Profile") Replied by *[saejangracer](/forum/user/41055-saejangracer "View saejangracer's Profile")* on topic *[File Insertion](/forum/25-install-update/887787-file-insertion#257001 "-- HikaShop version -- : 2.6.4 Hi Hikashop, Have recently discovered 2 Hikashop files modified on my site but not by me: 1. /administrator/components/com_hikashop/extensions/mail.php I checked the last backup and this file didn't exist in this location. The content of the file is a PHP code to upload, move and rename a file. 2. /administrator/components/com_hikashop/extensions/plg_hikashop_massaction_category/indexa.html I deleted this file because it contains a URL to a malware source file. What should I do with the mail.php file? Is it a legitimate hikashop file in the right place, or was it maliciously inserted? Also does this mean there's an open vulnerability in Hikashop 2.6.4 for the insertion to happen? Thank you =)")* Hi nicolas, Noted your advice, I will get hosting provider to assist on the matter since it's not a Hikashop vulnerability Thank you ![=)](/smile.gif "=)") --- Site building and troubleshooting [ www.hikashop.com/forum/product-category-...product-display.html](https://www.hikashop.com/forum/product-category-display/886962-editing-view-for-custom-front-end-product-display.html) (open) Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzI1LWluc3RhbGwtdXBkYXRlLzg4Nzc4Ny1maWxlLWluc2VydGlvbj90bXBsPW1hcmtkb3du) or [Create an account](/component/users/registration?Itemid=101) to join the conversation. Board Categories HikaShop Install & Update Product & Category Display Content Creation Sales and Orders Orders management Reports & Statistics Customers Checkout Payment Methods Shipping Methods Import & Export (CSV, XLS…) Specific Features Affilation Taxes Wishlist Vote Carousel & Slider Mass Actions Filters & Search Discount & Coupon Feature Request Integrations Showcase General Talk about HikaShop Development HikaShop 3.0 Beta Translation Commercial Jobs HikaShop Components HikaMarket Market: Feature requests Market: How to? Market: Bug Report HikaSerial General talk about HikaSerial Serial: Bug Report Serial: How to? Support en Français de HikaSerial (French Support) HikaSubscription HikaAuction Auction: Feature requests Auction: How to? Auction: Bug report Hikashop around the world Support en Français (French Support) Russian FAQ. Курс выживания с Hikashop. Частые вопросы и о Расширения Hikashop Наши сайты на Hikashop 日本語版サポート(Japanese Support) Thai German Archives Bug Report How to? [](/forum/topics/feed/mode-topics?format=feed&type=rss) Time to create page: 0.044 seconds [Powered by](/forum/credits) [Kunena Forum](https://www.kunena.org)