My moodle site was hacked

[handeyman]

I found eval 64 something in config.php and removed it but whenever I download a word attachment in a course it comes out all garbled...


Willing to pay someone who can fix this, let me know.

 

[jaimin26783]

Just Make your config.php file read only and your website will never be hacked again. make sure moodledata in dir is set to read/write from local not from outside. If you still have problem send me PM

 

[handeyman]

Thanks

 

[Bob_M]

make sure there are no weird files on the server, if they got in they could have left a shell script on the server so they could get back in.

 

[san2005]

If issue still not resolved, i can fix