cadline_web/www_archline_hu
11
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
61d176fb5e
www_archline_hu/deployed
History
imre.agent 61d176fb5e feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 
Build the archlinexp.eu/www baseline from clean sources on a dedicated
site branch, per the web-baseline deploy model: vanilla Joomla 3.9.2 core
plus the developer-sourced own-code plus a vetted module layer, with the
Cadline core delta applied on the 3.9.2 base. The generator is reused
unchanged: build-baseline.sh is site-agnostic, only the content differs.

Layers:
- core/      vanilla Joomla 3.9.2 official package (installer removed)
- cadline/   own-code from the developer source (beiratkozas, maintenance,
             mod_al_*, mod_alusers, mod_course_list) plus 11 assets that
             the developer source lacks
- deployed/  third-party module slugs taken from live, vetted
- overrides/ the 5 genuine Cadline core modifications, on the 3.9.2 base

The live core carried 31 stale com_users files: the updater skipped the
customized ones, so the version string said 3.9.2 while the code did not.
Taking vanilla 3.9.2 plus the 2 real deltas fixes that silently.

Vetting caught two items that content-based YARA did not flag. Both come
from a structural rule: an extra file on a core-component path that is
not a template override is not a module -- it is a leftover or a plant.
Both are excluded through malware-iocs.paths:
- components/com_mailto/mail.php: an unauthenticated file-write webshell
  (POST save_file + file_content -> fopen/fwrite, no auth check at all),
  present on live since 2021-07-26
- administrator/components/com_joomlaupdate/restoration.php: an Akeeba
  Kickstart leftover carrying a security password (known RCE vector)

Verification: build-baseline.sh -> out/ = 12284 files; YARA (16 rules) on
every source layer and on the built tree = 0 hits; none of the 291 IOC
paths present; no disguised .json dropper; core verified as 3.9.2; the
only extra file left on a core path is the legit Google reCAPTCHA library.

Assisted-by: claude-code@claude-opus-4-8
2026-07-17 12:18:26 +02:00
..
com_acym feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
com_contact/templates feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
com_content/templates feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
com_convertforms feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
com_finder/templates feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
com_jckman/administrator/components/com_jckman feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
com_joomgallery feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
com_jsn feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
com_k2/templates/trada/html/com_k2 feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
com_mailto/templates feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
com_newsfeeds/templates/trada/html/com_newsfeeds feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
com_oneallsociallogin feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
com_phocadownload feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
com_search/templates feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
com_sh404sef feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
com_smartcountdown3 feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
com_speasyimagegallery feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
com_sppagebuilder feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
com_tags/templates feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
com_users feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
language feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
lib_regularlabs/libraries/regularlabs feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
misc_administrator/administrator feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
misc_phocadownload/phocadownload feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
misc_phocadownloadpap/phocadownloadpap feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_acym/modules/mod_acym feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_articles_categories/templates feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_articles_category/templates/trada/html/mod_articles_category feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_articles_latest/templates feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_breadcrumbs/templates feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_bt_googlemaps/modules/mod_bt_googlemaps feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_convertforms/modules/mod_convertforms feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_custom/templates/trada/html/mod_custom feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_estore/templates/trada/html/mod_estore feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_jckquickicon/administrator/modules/mod_jckquickicon feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_jflickr/templates/trada/html/mod_jflickr feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_jsnform/modules/mod_jsnform feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_jsnsearch/modules/mod_jsnsearch feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_jsnusers/modules/mod_jsnusers feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_k2_content/templates/trada/html/mod_k2_content feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_k2_tools/templates/trada/html/mod_k2_tools feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_languages/templates/shaper_helixultimate/html/mod_languages feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_login/templates/shaper_helix3/html/mod_login feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_menu/templates feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_search/templates feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_smartcountdown3/modules/mod_smartcountdown3 feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_sp_quickcontact/templates/trada/html/mod_sp_quickcontact feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_sp_simple_gallery/templates/trada/html/mod_sp_simple_gallery feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_sppagebuilder/modules/mod_sppagebuilder feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_sppagebuilder_admin_menu/administrator/modules/mod_sppagebuilder_admin_menu feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_sppagebuilder_icons/administrator/modules/mod_sppagebuilder_icons feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_tags_popular/templates/shaper_helix3/html/mod_tags_popular feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_tags_similar/templates/shaper_helix3/html/mod_tags_similar feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
mod_wsregister/modules/mod_wsregister feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_acymailing/plugins/convertforms/acymailing feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_acymtriggers/plugins/system/acymtriggers feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_calculations/plugins/convertformstools/calculations feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_cl_hlusers/plugins/user/cl_hlusers feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_conditionallogic/plugins/convertformstools/conditionallogic feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_content_vote/templates/shaper_helixultimate/html/plg_content_vote feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_convertforms/plugins feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_emails/plugins/convertforms/emails feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_errorlogger/plugins/convertforms/errorlogger feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_extblank/plugins/system/extblank feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_fancybox/plugins/system/fancybox feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_helix3/plugins feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_helixultimate/plugins/system/helixultimate feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_jceacym/plugins/system/jceacym feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_jckeditor/plugins/editors/jckeditor feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_jckmodal/plugins/system/jckmodal feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_jsn_auth/plugins/authentication/jsn_auth feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_jsn_author/plugins/content/jsn_author feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_jsn_content/plugins/content/jsn_content feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_jsn_privacy/plugins/privacy/jsn_privacy feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_jsn_search/plugins/search/jsn_search feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_jsn_system/plugins/system/jsn_system feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_jw_sig/plugins/content/jw_sig feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_modals/plugins/system/modals feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_nnframework/plugins/system/nnframework feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_nrframework/plugins/system/nrframework feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_pdf/plugins/convertformstools/pdf feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_phocadownload/plugins feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_regularlabs/plugins/system/regularlabs feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_sh404sef/plugins/system/sh404sef feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_shmobile/plugins/system/shmobile feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_sourcerer/plugins feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_sppagebuilder/plugins feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_sppagebuilderproupdater/plugins/system/sppagebuilderproupdater feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_usergroups/plugins/jsn/usergroups feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_youtuber/plugins/system/youtuber feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
plg_youtuber_btn/plugins/editors-xtd/youtuber_btn feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
tpl_shaper_helix3/templates/shaper_helix3 feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
tpl_shaper_helixultimate/templates/shaper_helixultimate feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00
tpl_trada/templates/trada feat(archlinexp.eu): add clean deployable baseline on Joomla 3.9.2 2026-07-17 12:18:26 +02:00