---
title: "Detect, analyze and repair a hacked site"
manual: "TYPO3 Explained"
version: "11.5"
permalink: "https://docs.typo3.org/permalink/t3coreapi:security-detect-analyze-repair@11.5"
source: "Security/HackedSite/Index.rst"
rendered: "2026-10-21T15:30:00+00:00"
---

> [!WARNING]
> **Attention**
>
> TYPO3 v11 has reached end-of-life as of October 31th 2024 and
> is no longer being maintained. Use the version switcher on the top
> left of this page to select documentation for a supported version of TYPO3.
>
> Need more time before upgrading?
> You can purchase Extended Long Term Support (ELTS) for TYPO3 v11 here:
> [TYPO3 ELTS](https://typo3.com/services/extended-support-elts).

# Detect, analyze and repair a hacked site {#security-detect-analyze-repair}

Most websites do not get hacked. If yours did, there is something wrong
with it, or with the server, or with the hosting environment, or with
the security on your desktop computer, your editors' computers, etc.
You have to figure out how this happened so you can prevent it from
happening again. It is not enough to simply restore a hacked site – it
will most likely be hacked again, sooner or later.

In case your server or TYPO3 website has been hacked, a number of
steps should be taken to restore the system and to prevent further
attacks. Some recommended actions are described in this chapter but
always keep in mind: if you are already in the situation that you have
to restore a hacked site, focus on the limitation of damage and do not
react over-hastily.

## Steps to take when a site got hacked {#steps-to-take-when-a-site-got-hacked}

Please see the following chapters on the actions to take:

-   [Detect a hacked website](https://docs.typo3.org/permalink/t3coreapi:detect-a-hacked-website@11.5)
-   [Take the website offline](https://docs.typo3.org/permalink/t3coreapi:take-the-website-offline@11.5)
-   [Analyzing a hacked site](https://docs.typo3.org/permalink/t3coreapi:analyzing-a-hacked-site@11.5)
-   [Repair/restore](https://docs.typo3.org/permalink/t3coreapi:repair-restore@11.5)
-   [Further actions](https://docs.typo3.org/permalink/t3coreapi:further-actions@11.5)