Still on Drupal 7? Security support for Drupal 7 ended on 5 January 2025. Please visit our Drupal 7 End of Life resources page to review all of your options.
I can not set the web folder as root from server, so I created an htaccess in the root folder:
RewriteEngine on
RewriteCond %{REQUEST_URI} ^/$
RewriteRule ^(.*)$ /web/$1 [L]
The home page is loaded, with some JS error in console, e icons not loaded.
If I try to navigate the site I've 404, if I try to open the login page it redirects to home page.
How do I recover a hacked Drupal site?...The files have been scanned, and reveal two locations where phishing files have been added...under root / profiles and under root / vendor / stack...the files look to be collecting personnel data, login passwords and credit card details for forwarding to an email address...although oddly the site doesn't have a payment gateway...there could be other malicious code in other files that remains undetected, but generally the file directories looks to be in order...not sure if the database has been corrupted.
There are many index pages (very similar to activity tracker) on my site showing listings of different types of nodes. Many of these have pagers that go more than 1000 pages in past.
I do not want this.
I do not want these pagers to navigate to more than 10 or 20 pages. (Pages beyond that are too old)
How do I achieve this? Where should I put the fix in code?