Malware after first SC depoyment in Production server

Scriptcase 9 General
#1

Hi there!

I’m having trouble with a new SC installation on a client’s server. After the first deployment the browser shows a red alert for malware when I access the site. How can I check if any of my original SC or Third party files are infected? I appreciate any help!

Thanks!

#2

If you are using Google Chrome or a third party browser that uses the Chrome engine, then this is likley to be a bot that Google have to detect what they term as unsafe sites, there should be a link on the red warning or an email address, read the riot act to google as they are messing with you for trying to keep this secure, and because their bots can’t crawl all over the SC app, it repots it as a dangerous site.
Get the client to contact their hosting service and they will also contact Google. I had same issues got it fixed within the hour, Googel treading a very fine line.

#3

Hello Steve and thanks for your reply. I am having a serious problem now for I decided to upload and test my client´s Scriptcase apps to a demo folder in my own domain DACOSOFT.COM where I had previously, long ago, installed SC apps that were running ok. In my experiment I discovered that as soon as I got to setup the Scriptcase Production Environment password something triggered the alarm and the home page turned red with a “dangerous site” tag. I want to think it is all about a false positive.

Google Search Console informs me that these links contain malware:

https://dacosoft.com/apps/_lib/prod/
https://dacosoft.com/apps/_lib/prod/lib/php/?login
https://dacosoft.com/apps/_lib/prod/lib/php/nm_ini_manager2.php?rand=2f7aca5d3557d951

I am reporting it to my hosting provider to see if they can help, meanwhile I checked my Scriptcase local computer installation and it appears to be malware free.

#4

Try the chmod permissions on the production environment files, set them all to 755
I deploy to one web server that is very fussy about this, hosted by ‘SiteGround’
if that works you can change them back after setup, the other issue I missed was the php version 7.4 was very forgiving but 8.1 is quite strict, you can get all sorts of strange errors.

1 Like
#5

I have the same problem. When publishing an SC application to an Amazon EC2 server or instance. And it only happens as they say when there is a change in database connections or full release. And Google Chrome and browsers detect it as a malicious site or with Social Engineering risks. Can you tell me before “https://search.google.com/” when requesting a review that they argue, so that they remove the “Dangerous” warning?

1 Like
#6

Hello ssiieu, apparently the Scriptcase team did worked out a solution to this Phishing alert issue by Google as they are reporting in their Changelog update release 9.9.015 (July 18, 2023) https://www.scriptcase.net/es/changelog/
It remains to check if it will be necessary for us to reconnect to the production database after uploading fresh compiled Scriptcase apps? Has anyone tried this update?

1 Like