Urgent!!! I have found url(data:image/svg+xml;base64 in css - Joomla! Forum - community, help and support

i edditing error.css file in template/system/css , found code changed

code: select all

background: url(data:image/svg+xml;base64,pd94bwwgdmvyc2lvbj0ims4wiia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==);

this code before linking image this: background: url("images/...png") or something, in all, remember adding background image 404 error.php stylesheet.

anyways wonder how file able modified unknown means. cannot able find out file permissions had since restoration of website restoring earlier backup because website backend bruteforced , decided use backup thinking it's clean. little did know had crap.

basically prior today, i've been auditing website(bruteforced one) 1 month(after backend bruteforced) in order see or how bruteforced did after when reached @ enough enough , need put site online 1 month of downtime has lost me many users , potentials, found base4 sh*t when making css changes error.css. sick , tired , need site online regardless of base code or mis chief going on in site. pay server , having not use whole month bad cashflow. really!!!! need site online asap.

if know of can can done fast maybe scanning files base 4 hack scan script see how many files have or something, please advice me asap don't care hack anymore , need place online. got 3 hours left before that. in addition, if possible can tell me how chmod folders , files correct permissions directly on localhost before putting live live server doesn't have terminal access kind of shared hosting(looks anyways). in advance.

hi webvirtuoso,

no need panic, base64 encoded svg image (acutally gradient), can embedded inline css.

here decoded text looks like:

code: select all

<?xml version="1.0" ?>
<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" viewbox="0 0 1 1" preserveaspectratio="none">
  <lineargradient id="grad-ucgg-generated" gradientunits="userspaceonuse" x1="0%" y1="0%" x2="0%" y2="100%">
    <stop offset="0%" stop-color="#f2f2f2" stop-opacity="1"/>
    <stop offset="40%" stop-color="#ffffff" stop-opacity="1"/>
    <stop offset="100%" stop-color="#aaaaaa" stop-opacity="1"/>
    <stop offset="100%" stop-color="#8a5625" stop-opacity="1"/>
  </lineargradient>
  <rect x="0" y="0" width="1" height="1" fill="url(#grad-ucgg-generated)" />
</svg>

to check yourself, copy code above , put onto new svg file, eg. "something.svg" , open in browser