redhat - Drupal core - SQL injection aftermath procedures -

redhat - Drupal core - SQL injection aftermath procedures -

our production site run has potentially been compromised saw big spike in network traffic, brought downwards site.

since theft has potentially happen before our patching, steps should go through informing our client. need create password changes admin login, etc. else relevant? need alter db password on our server etc.

basically yes, of above.

there flow chart on [drupalgeddon project page] (https://www.drupal.org/project/drupalgeddon) can follow help ensure dealing clean site.

good luck

redhat mariadb