Cannot upload File on OJS 3.4.0.8 (Abstract issue)

Describe the issue or problem
The Problems is author, Editor, Reviewer cannot upload The file

What application are you using?
For example, OJS 3.4.0-8

Additional information
Please add any screenshots, logs or other information we can use to investigate this problem.

@asmecher
heres the Error log :

[08-Jun-2025 14:35:39 UTC] PHP Fatal error:  Uncaught ValueError: Path cannot be empty in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/controllers/grid/plugins/PluginGalleryGridHandler.php:300
Stack trace:
#0 /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/controllers/grid/plugins/PluginGalleryGridHandler.php(300): SplFileObject->__construct('', 'w')
#1 /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/controllers/grid/plugins/PluginGalleryGridHandler.php(276): PKP\controllers\grid\plugins\PluginGalleryGridHandler->installPlugin(Array, Object(APP\core\Request), true)
#2 [internal function]: PKP\controllers\grid\plugins\PluginGalleryGridHandler->upgradePlugin(Array, Object(APP\core\Request))
#3 /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/core/PKPRouter.php(334): call_user_func(Array, Array, Object(APP\core\Request))
#4 /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/core/PKPComponentRouter.php(291): PKP\core\PKPRouter->_authorizeInitializeAndCallRequest(Array, Object(APP\core\Request), Array)
#5 /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/core/Dispatcher.php(165): PKP\core\PKPComponentRouter->route(Object(APP\core\Request))
#6 /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/core/PKPApplication.php(395): PKP\core\Dispatcher->dispatch(Object(APP\core\Request))
#7 /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/index.php(21): PKP\core\PKPApplication->execute()
#8 {main}
  thrown in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/controllers/grid/plugins/PluginGalleryGridHandler.php on line 300
[08-Jun-2025 14:35:39 UTC] PHP Fatal error:  Uncaught ValueError: Path cannot be empty in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/controllers/grid/plugins/PluginGalleryGridHandler.php:300
Stack trace:
#0 /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/controllers/grid/plugins/PluginGalleryGridHandler.php(300): SplFileObject->__construct('', 'w')
#1 /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/controllers/grid/plugins/PluginGalleryGridHandler.php(276): PKP\controllers\grid\plugins\PluginGalleryGridHandler->installPlugin(Array, Object(APP\core\Request), true)
#2 [internal function]: PKP\controllers\grid\plugins\PluginGalleryGridHandler->upgradePlugin(Array, Object(APP\core\Request))
#3 /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/core/PKPRouter.php(334): call_user_func(Array, Array, Object(APP\core\Request))
#4 /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/core/PKPComponentRouter.php(291): PKP\core\PKPRouter->_authorizeInitializeAndCallRequest(Array, Object(APP\core\Request), Array)
#5 /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/core/Dispatcher.php(165): PKP\core\PKPComponentRouter->route(Object(APP\core\Request))
#6 /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/core/PKPApplication.php(395): PKP\core\Dispatcher->dispatch(Object(APP\core\Request))
#7 /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/index.php(21): PKP\core\PKPApplication->execute()
#8 {main}
  thrown in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/controllers/grid/plugins/PluginGalleryGridHandler.php on line 300
[08-Jun-2025 14:37:13 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:37:13 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:37:13 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:37:13 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:37:13 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:37:13 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:37:13 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:37:13 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:37:13 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:37:13 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:37:13 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:37:21 UTC] PHP Fatal error:  Uncaught Exception: Creating archive with submission files failed! in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/controllers/api/file/FileApiHandler.php:184
Stack trace:
#0 [internal function]: PKP\controllers\api\file\FileApiHandler->downloadAllFiles(Array, Object(APP\core\Request))
#1 /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/core/PKPRouter.php(334): call_user_func(Array, Array, Object(APP\core\Request))
#2 /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/core/PKPComponentRouter.php(291): PKP\core\PKPRouter->_authorizeInitializeAndCallRequest(Array, Object(APP\core\Request), Array)
#3 /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/core/Dispatcher.php(165): PKP\core\PKPComponentRouter->route(Object(APP\core\Request))
#4 /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/core/PKPApplication.php(395): PKP\core\Dispatcher->dispatch(Object(APP\core\Request))
#5 /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/index.php(21): PKP\core\PKPApplication->execute()
#6 {main}
  thrown in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/controllers/api/file/FileApiHandler.php on line 184
[08-Jun-2025 14:37:23 UTC] PHP Fatal error:  Uncaught Exception: Creating archive with submission files failed! in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/controllers/api/file/FileApiHandler.php:184
Stack trace:
#0 [internal function]: PKP\controllers\api\file\FileApiHandler->downloadAllFiles(Array, Object(APP\core\Request))
#1 /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/core/PKPRouter.php(334): call_user_func(Array, Array, Object(APP\core\Request))
#2 /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/core/PKPComponentRouter.php(291): PKP\core\PKPRouter->_authorizeInitializeAndCallRequest(Array, Object(APP\core\Request), Array)
#3 /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/core/Dispatcher.php(165): PKP\core\PKPComponentRouter->route(Object(APP\core\Request))
#4 /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/core/PKPApplication.php(395): PKP\core\Dispatcher->dispatch(Object(APP\core\Request))
#5 /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/index.php(21): PKP\core\PKPApplication->execute()
#6 {main}
  thrown in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/controllers/api/file/FileApiHandler.php on line 184
[08-Jun-2025 14:37:25 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:37:25 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:37:25 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:37:25 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:37:25 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:37:25 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:37:25 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:37:25 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:37:25 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:37:25 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:37:25 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:39:00 UTC] PHP Deprecated:  str_replace(): Passing null to parameter #3 ($subject) of type array|string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/pages/login/LoginHandler.php on line 196
[08-Jun-2025 14:39:16 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:39:16 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:39:16 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:39:16 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:39:16 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:39:16 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:39:16 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:39:16 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:39:16 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:39:16 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:39:16 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:39:16 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:39:16 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:39:16 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:39:16 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:39:16 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:39:16 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:39:16 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 14:39:24 UTC] PHP Deprecated:  preg_replace_callback(): Passing null to parameter #3 ($subject) of type array|string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/lib/vendor/slim/slim/Slim/Http/Uri.php on line 717
[08-Jun-2025 22:25:27 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 22:25:27 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 22:25:27 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 22:25:43 UTC] PHP Deprecated:  preg_replace_callback(): Passing null to parameter #3 ($subject) of type array|string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/lib/vendor/slim/slim/Slim/Http/Uri.php on line 717
[08-Jun-2025 22:35:39 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 22:35:39 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 22:35:39 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 22:35:53 UTC] PHP Deprecated:  preg_replace_callback(): Passing null to parameter #3 ($subject) of type array|string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/lib/vendor/slim/slim/Slim/Http/Uri.php on line 717
[08-Jun-2025 22:41:03 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 22:41:03 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 22:41:03 UTC] PHP Deprecated:  stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/classes/citation/Citation.php on line 118
[08-Jun-2025 22:41:45 UTC] PHP Deprecated:  preg_replace_callback(): Passing null to parameter #3 ($subject) of type array|string is deprecated in /DATA/stitduko/public_html/ejournal.stitdukotabaru.ac.id/lib/pkp/lib/vendor/slim/slim/Slim/Http/Uri.php on line 717

Hi @Fauji_Nurdin,

It seems as though the tempnam PHP function is failing for some reason – possibly because it’s being asked to create a file in a directory it doesn’t have access to (based on the sys_get_temp_dir function.

Check that the sys_temp_dir directive in php.ini is set properly, and that PHP has permission to write files there.

Regards,
Alec Smecher
Public Knowledge Project Team

I have Already check The sys_temp_dir and its has a write permission, But Affter I check Deeply and try to Scan using AMWScan i found that journal Being Hacked by Online Gambling Then Injected malware to the journal …and After Sacaning i Got the malware and Clen it Up then upgrade it to 3.4.0.9
they create index.php inside A plugin folder

/public_html/backupejournal/plugins/importexport/quickSubmit/classes/form/files.php

Hi @Fauji_Nurdin,

What was the files_dir setting in your config.inc.php?

Regards,
Alec Smecher
Public Knowledge Project Team

[files]

; Complete path to directory to store uploaded files
; (This directory should not be directly web-accessible)
; Windows users should use forward slashes
files_dir = /DATA/stitduko/ojsdata

; Path to the directory to store public uploaded files
; (This directory should be web-accessible and the specified path
; should be relative to the base OJS directory)
; Windows users should use forward slashes
public_files_dir = public Permision

Hi @Fauji_Nurdin,

Thanks, that looks OK. We are aware of automated attacks against older releases of OJS, but 3.4.0-8 or 3.4.0-9. If you upgraded recently, it’s likely that the attack happened against the previous version.

I would suggest reviewing your journal_settings tables for any unexpected Javascript, and changing any admin or journal manager passwords, in addition to cleaning up your installation area.

If you’re able to shed any light on the means of attack, please let me know; investigating this is a little out of scope for the forum, but I’d start by looking at the file creation dates of the unexpected files and correlating them against the access log.

Regards,
Alec Smecher
Public Knowledge Project Team

This topic was automatically closed after 9 days. New replies are no longer allowed.