3PD components being targeted

[mambomod]

Lately a lot of mambo sites have been getting hacked, with configuration.php files being overwritten and other unfortunate attacks. Hackers seem to be targeting third party components.

If you are using any components that do not come bundled with mambo then it is advised to look in the php files for that component and make sure that it contains

/** ensure this file is being included by a parent file and stop direct linking */
defined( '_VALID_MOS' ) or die( 'Direct Access to this location is not allowed.' );

towards the very top of the file (usually underneath file comments).

Register globals should also be turned off if possible. Mambo has the ability to emulate register globals on if necessary.

Regular backups are a great idea and will help repairing any damage if your site is unfortunate enough to be targeted.