Hello,

Thanks for reaching out to us. Could you please share temporary administrator access to your Joomla backend? You can provide the credentials securely in the hidden content section. Also, please take a full backup of your site before we make any changes.

Once I have access, I’ll investigate further and see what’s causing the issue. Let me know once you’ve shared the details!

Best regards,

I just install a fresh federal quickstart cause it got infected and looks like its doing again they inject the index.php

I have a htaccess with this code:

<FilesMatch ".(py|exe|phtml|php|php5|php7|php8|cache|suspected)$"> Order Allow,Deny Deny from all </FilesMatch> <FilesMatch "^(index.php|aboutindex.php|menuindex.php|locks.php|test2index.php|press.php|pressindex.php)$"> Order Allow,Deny Allow from all </FilesMatch> <IfModule mod_rewrite.c> RewriteEngine On RewriteBase / RewriteRule ^index.php$ - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . /index.php [L] </IfModule>

soon i delete it let me update joomla but you should check federal template for a breach please

Hello,

I apologize for the inconvenience. This template contains an older version of SP Page Builder along with Helix Ultimate, which is causing these issues when the site goes live.

To clean your site, please follow the instructions in our documentation:

https://www.joomshaper.com/documentation/sp-page-builder/troubleshooting#how-to-clean-an-infected-joomla-4x-6x-site

Please make sure that, after cleaning the site, you update SP Page Builder and Helix Ultimate to their latest versions. Otherwise, the issue may occur again after the updates or when the site goes live.

Thanks for your patience and understanding!