HI
where to download Helix3 template for joomla 3.10 security update?
https://www.joomshaper.com/forum/question/45671
My joomla 3.10 was hacked due to Helix3 template securty hole.
Awaiting an answer
Helix Framework
Helix3 template for joomla 3.10 security update
7 replies
jcalvert
Hi Sky,
You can't keep running Joomla 3.10. You need to update to Joomla 4, and then to Joomla 5. This is not easy, but is the only way to keep using Joomla and not get your site hacked again. Then you need to apply the JoomShaper critical security updates which are detailed in this new blog post here:
https://www.joomshaper.com/blog/security-update-for-joomla-3-users
The blog post applies to Joomla 3, 4, 5, and 6.
The way to properly do this is to take your site offline, then restore it from an uninfected backup copy. Set up the restored site at a staging URL that's not accessible to the public. Then begin the steps to migrate from Joomla 3 to Joomla 4. Once you are on Joomla 4, you can begin the JoomShaper Page Builder and Helix plugin updates. Then you can update to Joomla 5. Eventually you can make the Joomla 5 site live.
Again, this is a complicated sequence, but it really must be done. Joomla 3 is vulnerable to being hacked.
Ziaul Kabir Staff
Hi Sky,
If you're using Joomla 3, you can download the security patches from the following blog post:
The Helix 3 security update is also available here:
If your website has already been compromised, simply installing the update is not enough. Please follow the cleanup and recovery steps outlined in this forum guide:
After cleaning the website, update Helix 3 and any other affected JoomShaper extensions to the latest security release. The security update also includes guidance on checking your site for signs of compromise before applying the patches.
Thank you.
sky Asked this
I found out that my joomla 3.10 is running shaper_helixultimate,
https://www.joomshaper.com/joomla-templates/helixultimate
Can I install this ver 2.2.9 into joomla 3.10 to override the files that might be changed by hacker?
jcalvert
Simple answer: No.
In order to recover a Joomla website that's been hacked, you pretty much need a professional to do that.
The problem is, even a professional may not be able to determine which website files have been compromised, and whether or not the Joomla database has been compromised. Instead of spending a lot of time trying to determine that, which can be very difficult, the best approach is to revert to a backup of the website that occurred before the hack, then begin the process of bringing up the backup in a staging area that's not accessible to the public. Then you apply the required updates to the Joomla extensions, then you can bring the site back online again.
sky Asked this
Hi
After applying the security patch for my joomal 3.10. the contact page broken.
https://www.ds-101.com/about-ds/ds-contact
Too few arguments to function Joomla\CMS\Session\Session::getInstance(), 0 passed in /var/www/clients/client0/web59/web/components/com_sppagebuilder/addons/form_builder/site.php on line 56 and at least 2 expected
jcalvert
Did you first restore the website from a clean backup copy?
You can't just apply the SP Page Builder update to a hacked website.
Do you realize that a Joomla 3.10 website will be vulnerable to hacking? You need to update to Joomla 4 and then Joomla 5, all the way to 5.4.7 (current version).
sky Asked this
I restored the clean joomla 3.10 backup, then applied the patch. I could not upgrade to joomla 4 due running a custom old joomla extension.
jcalvert
Google AI had some helpful info regarding your situation.
I asked it: "Can a Joomla 3.10 website that's running a custom extension that's not Joomla 4 compatible be hardened against hacking?"
You can ask same here if you like: https://www.google.com/search?udm=50&aep=11&atvm=2
Log in to reply.