How to update your version

How to find out what version you're running Log-in to manage your website with Pro Edition (i.e. http://example.com/sohoadmin) and look in the bottom right corner of the admin tool window (ie. in the footer).

How to update your version

If you're running v4.8.x or earlier than you've got to first update to v4.9 via Fantastico or by downloading our free auto-installer/updater. Once you're on v4.9 you can update to the latest build using v4.9's built-in Software Updates feature (Main Menu > Webmaster > Software Updates).

Using the php file patch utility

1. Download the exploit_fix.zip file to your PC
2. Extract it on your PC and upload the contained exploit_fix.php file (i.e. via an FTP client like CuteFTP) to the document root folder (usually 'public_html') of the website you want to patch.
3. Pull up a browser and go to...
   
   http://yourdomain/exploit_fix.php

How to run this on your entire server without having to update the versions of every Soholaunch site on your server

1. Upload exploit_fix.php to whatever directory on your server contains all your site folders (i.e. home, sites, var, vhosts).
2. Log-in to your server via SSH as 'root' (log-in as root regardless of whether your running php suexec).
3. Type this at the SSH command prompt...
   
   php exploit_fix.php

Warning

Use at your own risk. Make back-ups first. We only support running this on Soholaunch Pro Edition files. Be especially careful running this server-wide if some php scripts on your server are encrypted via Zend, IonCube, etc. because it will screw them up.

Using the malicious file scanner script

Upload (via FTP) sohoscan.php file contained in .zip to your document root folder (i.e. public_html), pull up a browser, and go to yourdomain.com/sohoscan.php.

You will be presented with a list of files that the scanner script thinks might be malicious files.

Use this list of 'suspects' to weed out the actual bad files from all of the other legitimate scripts that you recognize as your own.

How it works

Basically, this script reads all the files in your document root directory (i.e. public_html), including subfolders, etc., filters out verified Soholaunch program files, and categorizes the rest into two groups...

Suspicious files: Contain certain code commands common to most hacker exploit files.

Non-Soholaunch files: Files do not contain any of the searched-on suspicious commands, but are could not be verified as standard Soholaunch program files. Most of these files are usually legitimate, but if something got by the suspicious command check it'll show up here.