Support

Akeeba Backup for Joomla!

#22755 Rogue site restoration?

Posted in ‘Akeeba Backup for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Akeeba Backup version
n/a

Latest post by on Friday, 10 July 2015 17:20 CDT

Wednesday, 10 June 2015 05:45 CDT

drjjw
EXTREMELY IMPORTANT: Please attach a ZIP file containing your Akeeba Backup log file in order for us to help you with any backup or restoration issue. If the file is over 2Mb, please upload it on your server and post a link to it.

I am looking for some urgent help/guidance.

I woke up this morning to find my website reverted to a version from 5 days ago. It seems the database, not the files were reverted. I backup daily with Akeeba Backup via CLI/Cron and the the available backups in the list are missing the last 4 days, until today, when they resumed again, on schedule. This suggests to me that the site was restored to a version, 4 days old. The files from the missing backups (the prior 4 days) are present - in /administrator/com_akeeba_backups/ but the corresponding backups are not listed in the Akeeba backend - again supporting that the site was restored.

I cannot for the life of me explain how this can happen, other than hack? Can anything else explain this? I just find it so odd that someone hacking site would choose to restore a version of it. A have htpassword on admin, AdminTools firewall, mod_sec, CSF firewall etc. I know none of this excludes a hack but I am desperately searching for other explanations.

Any guidance is appreciated

Jordan

Wednesday, 10 June 2015 06:50 CDT

nicholas
Hello Jordan,

As I told you on Twitter you should ask your host about this. Akeeba Backup will NEVER do a restoration on its own. It's not even capable of anything remotely resembling something like that and for a very good reason: you need to perform the restoration outside Joomla! (even the integrated restoration is implemented as a separate web script, locked with a very long password generated on the fly when you launch it).

The most likely thing to have happened is the host restoring their database server to an earlier version after a problem hit their server. Please contact your host. We can't offer any help for issues not related to our software :(

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Wednesday, 10 June 2015 06:55 CDT

drjjw
I completely understand and have contacted them.

Jordan

Friday, 10 July 2015 17:20 CDT

System Task
system
This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!