OJS Malware Cleanup & Hardening

Our Open Journal Systems site has started throwing suspicious error messages and I’m worried it has been compromised. I need a security-minded developer to: • run a full scan of the server and OJS codebase, locate and remove every trace of malware • verify core files, themes and plugins against clean OJS releases, then patch or upgrade where needed • harden the installation (file permissions, .htaccess rules, firewall/ModSecurity tweaks, brute-force protection, etc.) so the infection doesn’t come back • create or confirm a safe backup first—at the moment I’m not even sure one exists • provide a short report summarising what you found, what you fixed, and any follow-up steps I should take The site is live, so minimal downtime is crucial. If you’re experienced with OJS, PHP, Linux shells and tools such as ClamAV, Maldet or similar scanners, I’d love to get this resolved quickly.

Project ID: 40511930