X3Photo Gallery Forums

I did some research, and found the script where something had been injected:
http://www.abertrande.com/iv-includes/a ... sewheel.js

Compare it to the authentic Imagevue script and how it looks from within our ZIP file:
https://www.photo.gallery/demo/x2/iv-include ... sewheel.js

As you can see, there is some code: I am not sure what this does or tries to do, but I can see your website makes some calls to scripts on that server. If you recently upgraded, I am not sure how it got there ... Either your admin was not properly passworded, or maybe you were using an older version of Imagevue? In either case, delete this file and re-upload it, and check that the local files in your ZIP are clean ... Check the date at which time this file was last modified on your server?

Yes, its fixed now and does not make any remote calls ... I would be cautious though, as someone must have been able to access and upload or edit a file earlier somehow. Check the file mentioned earlier once in a while to make sure it does not get edited. Did you replace everything in the Imagevue folder except your content folder?

Normally, you should not change permissions on any folders except the ones where Imagevue needs to write ... that would be the /iv-config/ folder and the /content/ folder. The other folders should remain in your servers default permission state on upload ...