Closed

Remove Joomla bug on site that calls a malicious mysql query

my hosting company blocked my joomla site because each time someone visits a page, it make a sql query, i need someone within the first hour to find out where this sql command is on the site. the host support shows this query being made all the time:

I did find a complex query which seems to run each time an article is read:

mysql> explain SELECT * FROM jos_content WHERE 1 AND UNIX_TIMESTAMP(publish_up)<=NOW() AND ( `state`='1' OR `state`='-1' ) AND ( `catid` = '0' OR `catid` = '1' OR `catid` = '3' OR `catid` = '28' OR `catid` = '27' OR `catid` = '31' OR `catid` = '32' OR `catid` = '37' OR `catid` = '38' OR `catid` = '39' OR `catid` = '42' OR `catid` = '43' OR `catid` = '44' OR `catid` = '45' OR `catid` = '58' OR `catid` = '59' OR `catid` = '60' OR `catid` = '62' OR `catid` = '63' OR `catid` = '67' OR `catid` = '68' OR `catid` = '69' OR `catid` = '70' OR `catid` = '74' OR `catid` = '77' OR `catid` = '76' OR `catid` = '78' OR `catid` = '79' OR `catid` = '80' OR `catid` = '85' OR `catid` = '86' OR `catid` = '87' OR `catid` = '88' OR `catid` = '92' ) AND ( `sectionid` = '0' OR `sectionid` = '9' OR `sectionid` = '13' OR `sectionid` = '11' OR `sectionid` = '12' OR `sectionid` = '15' ) AND ( (`title` LIKE '%[url removed, login to view], <a href=http://www.migrainetreatx.com/>fioricet codeine</a>, tqyosaw, [url=[url removed, login to view]]fioricet info[/url], xzkrgin, [url removed, login to view] fioricet, qnikqvx, <a href=http://itwitterfollowers.com/>buy twitter followers wwwarticlesbasecom</a>, alvdscx, [url=[url removed, login to view]]get more followers on twitter[/url], rteoavj, [url removed, login to view] buy twitter followers, abuzlda, <a href=http://hopkinspark.org/>purchase electronic cigarettes</a>, imvzomy, [url=[url removed, login to view]]liquid electronic cigarettes[/url], sdfzeoq, [url removed, login to view] electronic cigarettes buy, ekuhpqn, <a href=http://linuxintro.com/>sabayon linux guide</a>, oyilqsm, [url=[url removed, login to view]]learn linux easy[/url], hxvetgc, [url removed, login to view] linux guide to linux certification, qyynaqk, <a href=http://paydayloansbuyer.com/>payday loans</a>, ljlqcln, [url=[url removed, login to view]]payday loans[/url], tqolvyh, [url removed, login to view] federal law on pay day loans, urggzbr, <a href=http://ukmobileslots.co.uk/>mobile slots</a>, gzkcuqh, [url=[url removed, login to view]]mobile slot games[/url], ronyfvp, [url removed, login to view] slot mobile nigeria, dxnfyxd.%' tp://[url removed, login to view]]learn %' OR `introtext` LIKE '% [url=[url removed, login to view]]learn %') OR (`fulltext` LIKE '% linux %' OR `introtext` LIKE '% linux %') OR (`fulltext` LIKE '% easy[/url], %' OR `introtext` LIKE '% easy[/url], %') OR (`fulltext` LIKE '% hxvetgc, %' OR `introtext` LIKE '% hxvetgc, %') (`title` LIKE '%Twitter Followers%' OR `title` LIKE '%Twitter Followers%' OR `title` LIKE '%Twitter Followers%' ) AND ( `created_by_alias` LIKE '%Buy twitter followers wwwmerchantcirclecom%' OR `created_by_alias` LIKE '%Buy twitter followers wwwmerchantcirclecom%' OR `created_by_alias` LIKE '% Buy twitter followers wwwmerchantcirclecom' OR `created_by_alias` LIKE 'Buy twitter followers wwwmerchantcirclecom' ) AND ( created LIKE '%2012-09-13%' );

+----+-------------+-------------+------+---------------------------------+------+---------+------+-------+-------------+

| id | select_type | table | type | possible_keys | key | key_len | ref | rows | Extra |

+----+-------------+-------------+------+---------------------------------+------+---------+------+-------+-------------+

| 1 | SIMPLE | jos_content | ALL | idx_section,idx_state,idx_catid | NULL | NULL | NULL | 10421 | Using where |

+----+-------------+-------------+------+---------------------------------+------+---------+------+-------+-------------

Skills: Joomla, MySQL, PHP, Software Architecture

See more: joomla remove payday loans, twitter mobile site, php catid buy, php catid, mysql org, mobile bug, learn sql, buy followers twitter, joomla host, find twitter followers, slot games, payday loans, mysql query, malicious, linux article, federal, bug out, sql table remove, purchase remove, php sql complex, joomla article url, run linux command php, php fulltext, simple slots, query page

About the Employer:
( 0 reviews ) Curacao

Project ID: #2502336

22 freelancers are bidding on average $248 for this job

rabbul

Please check PMB

$250 USD in 1 day
(441 Reviews)
7.9
pan09

I can solve the problem quick

$250 USD in 1 day
(192 Reviews)
7.4
joomextensions

Hello, We are ready for that job. Please check Private Message. Regards.

$200 USD in 4 days
(75 Reviews)
7.1
hunterboss

Hi friend Let me fix this for you. This issue I guess hacker hacked your site to set link and get SEO

$250 USD in 1 day
(139 Reviews)
7.1
terrycoder

Please let me help you, thanks!

$120 USD in 1 day
(161 Reviews)
6.9
dinotech

understood your requirement and ready to start..............

$250 USD in 2 days
(68 Reviews)
6.8
Msolutions7

``````````Hi, Greetings of the day.****** READY TO START******Hire an expert JOOMLA and PHP developers who has been working since last 9 yrs on multiple projects. Will be available with you while working and quality wo More

$250 USD in 3 days
(58 Reviews)
6.8
tuxadmin

Hi, please see my profile for security-related issues. Thank you.

$250 USD in 1 day
(105 Reviews)
6.4
HBKTechnologies

Joomla makes a heck of a lot more than one query every time you load a page, if it didn't do this you wouldn't be seeing anything. I'm not sure why your host would tell you this, sounds like you need a new host. THe More

$250 USD in 1 day
(57 Reviews)
5.8
sat12

Please see PMB

$250 USD in 1 day
(96 Reviews)
5.8
VSmartTech

It's very easy task. I can do it within few hours Thanks, Thomas

$100 USD in 1 day
(29 Reviews)
5.6
mohanchauhan

Dear Sir, Joomla expert here to complete the project.

$90 USD in 1 day
(15 Reviews)
5.7
marketingzone

Kindly check pm to get an attractive bid

$250 USD in 3 days
(49 Reviews)
5.6
devd22

We can start immediately. Quality work promised.

$250 USD in 2 days
(141 Reviews)
5.4
metaexcel

Hello Sir, Please check my profile regarding malwares issues. Please check PMB for more details. Thanks

$250 USD in 1 day
(58 Reviews)
5.1
webicent

Hello Sir, We are ready to solve this issue. Kindly check PMB for more details and portfolio. Thanks & Regards Team Webicent

$250 USD in 0 days
(26 Reviews)
4.9
neoarty

Hello Sir, Please check your PMB.

$300 USD in 2 days
(2 Reviews)
4.4
firmy24

I can fix it.

$250 USD in 1 day
(5 Reviews)
4.1
TopWebCoder

Look No Further, TopWebCoder is Here.

$250 USD in 5 days
(4 Reviews)
3.6
ZIA7rPu52

Custom software development (<b><i>Removed by Admin</i></b>)

$750 USD in 1 day
(0 Reviews)
0.0