# Prestashop hacked

**URL:** <https://forum.oxid-esales.com/t/prestashop-hacked/52077>\
**Category:** English forums\
**Tags:** general\
**Created:** [August 25, 2011, 2:25am UTC](https://forum.oxid-esales.com/t/prestashop-hacked/52077 "2011-08-25T02:25:33Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![spurvis](https://forum.oxid-esales.com/letter_avatar_proxy/v4/letter/s/8491ac/32.png) [@spurvis](https://forum.oxid-esales.com/u/spurvis)\
**Post date:** [August 25, 2011, 2:25am UTC](https://forum.oxid-esales.com/t/prestashop-hacked/52077/1 "2011-08-25T02:25:33Z")

</div>

Anybody hear about the Prestashop hack that infected several shop? If so, wondering if anybody has any thoughts on this with regards to OXID? That is, could anything useful be learned from this and applied to OXID security? Or was the issue particular to prestashop?

Can see this if you want details:

> **[Footer.tpl vulnerability?](https://www.prestashop.com/forums/topic/125798-footertpl-vulnerability/)**
>
> Hi all,
>  
> I use an SCM system, I was just about to commit some files when I see in the "unversioned" list of files a new file which I did not remember creat...

I think infection was somehow sourced from the main prestashop server being hacked then spread to shops, but not exactly sure.

---

<div class="post-metadata">

**Author:** ![marco.steinhaeuser](https://forum.oxid-esales.com/user_avatar/forum.oxid-esales.com/marco.steinhaeuser/32/1832_2.png) [@marco.steinhaeuser](https://forum.oxid-esales.com/u/marco.steinhaeuser)\
**Post date:** [August 25, 2011, 12:47pm UTC](https://forum.oxid-esales.com/t/prestashop-hacked/52077/2 "2011-08-25T12:47:32Z")

</div>

Hi,

don’t think this could happen. As far as I understood it, Presta lost some customer data including passwords etc. This is really bad…

> **[Please Read: Security Procedure](https://www.prestashop.com/forums/topic/126114-please-read-security-procedure/)**
>
> Last night, the PrestaShop’s official website, prestashop.com, was hacked, resulting in the misappropriation of a script intended for transcribing news info...

Regards

---

<div class="post-metadata">

**Author:** ![mjkranzler](https://forum.oxid-esales.com/letter_avatar_proxy/v4/letter/m/13edae/32.png) [@mjkranzler](https://forum.oxid-esales.com/u/mjkranzler)\
**Post date:** [August 29, 2011, 9:54pm UTC](https://forum.oxid-esales.com/t/prestashop-hacked/52077/3 "2011-08-29T21:54:51Z")

</div>

I’m a PrestaShop Community Manager, so I just wanted to stop by and give you a little additional information about what we were dealing with.

We identified the hack and managed to close the loophole and create safeguards to prevent it from happening again within 24 hours of the first report. We’ve implemented many new safeguards on our servers to prevent this from happening again, and more importantly, if it ever does happen to us, it will have no way of accessing any member stores.

So far, we’ve had no reports of customer data being stolen, but we do encourage anyone who suspects that they have had their data stolen to file a report with their local police station, and ask everyone to change their passwords just as a security measure.

If you have any more questions, you can find me on the [forums](http://www.prestashop.com/forums).

-Mike Kranzler

---

<div class="post-metadata">

**Author:** ![marco.steinhaeuser](https://forum.oxid-esales.com/user_avatar/forum.oxid-esales.com/marco.steinhaeuser/32/1832_2.png) [@marco.steinhaeuser](https://forum.oxid-esales.com/u/marco.steinhaeuser)\
**Post date:** [August 30, 2011, 11:18am UTC](https://forum.oxid-esales.com/t/prestashop-hacked/52077/4 "2011-08-30T11:18:02Z")

</div>

Hi Mike,

thanks for your statement. Hope to see you at [ecommerce Paris](http://ecommerceparis.com/2011/), are you going?

Regards

---

<div class="post-metadata">

**Author:** ![system](https://forum.oxid-esales.com/user_avatar/forum.oxid-esales.com/system/32/4245_2.png) [@system](https://forum.oxid-esales.com/u/system)\
**Post date:** [July 13, 2026, 7:38pm UTC](https://forum.oxid-esales.com/t/prestashop-hacked/52077/5 "2026-07-13T19:38:44Z")

</div>


