{"issue":{"state":"open","created_at":"2011-11-29T17:34:05Z","updated_at":"2011-11-29T17:34:09Z","user":{"gravatar_id":"256406243346b9253f8610fb1d1e05f6","id":1215373,"url":"https://api.github.com/users/importer","login":"importer","avatar_url":"https://secure.gravatar.com/avatar/256406243346b9253f8610fb1d1e05f6?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png"},"comments":4,"body":"Some of my typolight webapps (about 5 of them) have been attacked recently. There was some HTML code injected to PHP files: index and main language files inside modules. It was an IFRAME connecting to some untrusted websites around the world.\nMy server admin told that it could be because of password-stealing from Total Commander FTP confguration via some Trojans or sth. But last time it happend on a local server without any FTP.\nIt sounds like there could be a BIG security whole inside typolight... I hope not...\n\n--- _Originally created by jacobro on December 2nd, 2009, at 03:05pm (ID 1231)_","assignee":{"gravatar_id":"87d2e5aefadcb310f9155df28c2b3582","id":1192057,"url":"https://api.github.com/users/leofeyer","login":"leofeyer","avatar_url":"https://secure.gravatar.com/avatar/87d2e5aefadcb310f9155df28c2b3582?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png"},"id":2388471,"labels":[{"name":"Defect","color":"bd2c00","url":"https://api.github.com/repos/contao/import/labels/Defect"},{"name":"Invalid","color":"ffdd00","url":"https://api.github.com/repos/contao/import/labels/Invalid"}],"pull_request":{"patch_url":null,"html_url":null,"diff_url":null},"number":1231,"title":"Security problem - script injection into PHP files","closed_at":null,"html_url":"https://github.com/contao/import/issues/1231","url":"https://api.github.com/repos/contao/import/issues/1231","milestone":null},"action":"created","comment":{"created_at":"2011-11-29T17:34:09Z","updated_at":"2011-11-29T17:34:09Z","user":{"gravatar_id":"87d2e5aefadcb310f9155df28c2b3582","id":1192057,"url":"https://api.github.com/users/leofeyer","login":"leofeyer","avatar_url":"https://secure.gravatar.com/avatar/87d2e5aefadcb310f9155df28c2b3582?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png"},"body":"This issue should be discussed in the forums. There have been quite a few similar cases and TYPOlight was never the culprit. More information is available in the forums.\n\n--- _Originally created on December 2nd, 2009, at 08:50pm_","id":2937430,"url":"https://api.github.com/repos/contao/import/issues/comments/2937430"}}