imre.agent
61d176fb5e
Build the archlinexp.eu/www baseline from clean sources on a dedicated
site branch, per the web-baseline deploy model: vanilla Joomla 3.9.2 core
plus the developer-sourced own-code plus a vetted module layer, with the
Cadline core delta applied on the 3.9.2 base. The generator is reused
unchanged: build-baseline.sh is site-agnostic, only the content differs.
Layers:
- core/ vanilla Joomla 3.9.2 official package (installer removed)
- cadline/ own-code from the developer source (beiratkozas, maintenance,
mod_al_*, mod_alusers, mod_course_list) plus 11 assets that
the developer source lacks
- deployed/ third-party module slugs taken from live, vetted
- overrides/ the 5 genuine Cadline core modifications, on the 3.9.2 base
The live core carried 31 stale com_users files: the updater skipped the
customized ones, so the version string said 3.9.2 while the code did not.
Taking vanilla 3.9.2 plus the 2 real deltas fixes that silently.
Vetting caught two items that content-based YARA did not flag. Both come
from a structural rule: an extra file on a core-component path that is
not a template override is not a module -- it is a leftover or a plant.
Both are excluded through malware-iocs.paths:
- components/com_mailto/mail.php: an unauthenticated file-write webshell
(POST save_file + file_content -> fopen/fwrite, no auth check at all),
present on live since 2021-07-26
- administrator/components/com_joomlaupdate/restoration.php: an Akeeba
Kickstart leftover carrying a security password (known RCE vector)
Verification: build-baseline.sh -> out/ = 12284 files; YARA (16 rules) on
every source layer and on the built tree = 0 hits; none of the 291 IOC
paths present; no disguised .json dropper; core verified as 3.9.2; the
only extra file left on a core path is the legit Google reCAPTCHA library.
Assisted-by: claude-code@claude-opus-4-8
26 lines
1.4 KiB
PHP
26 lines
1.4 KiB
PHP
<?php
|
|
$lang['go_to_dashboard'] = 'Vissza a tanfolyamokhoz';
|
|
$lang['exercise_files'] = 'Gyakorlati Fájlok';
|
|
$lang['download'] = 'Letöltés';
|
|
$lang['downloads'] = 'Letöltések';
|
|
$lang['download_link'] = 'letoltesek';
|
|
$lang['download_txt'] = 'Ez az oldal tartalmazza a kurzus elvégzéséhez szükséges anyagokat:';
|
|
$lang['complete_continue'] = 'Befejezés és folytatás';
|
|
$lang['complete'] = 'teljesítve';
|
|
$lang['logo'] = 'https://www.archline.hu/public/img/icons/ARCHLineXP_logo_yellow_gray_web_2.png';
|
|
$lang['icon'] = '/public/img/icons/favicon_1.ico';
|
|
$lang['url'] = 'beiratkozas/tanfolyamok/';
|
|
$lang['color'] = '#e67e22';
|
|
$lang['linear_color'] = '#f0a15b';
|
|
$lang['courses_url'] = 'https://www.archline.hu/oktatas/workshopok';
|
|
$lang['progress_desc'] = 'Alapvető ARCHLine.XP tanfolyamok saját tempódban';
|
|
$lang['signIn'] = 'Bejelentkezés';
|
|
$lang['username'] = 'Felhasználónév';
|
|
$lang['password'] = 'Jelszó';
|
|
$lang['forgotUsername'] = 'Elfelejtette felhasználónevét?';
|
|
$lang['forgotPassword'] = 'Elfelejtette jelszavát?';
|
|
$lang['createAccount'] = 'Fiók létrehozása';
|
|
$lang['usernameLink'] = '/lost-user-name';
|
|
$lang['passwordLink'] = '/elfelejtett-jelszo';
|
|
$lang['views'] = 'Feliratkozó';
|