Site hacked! help find the reason and how to prevent it.
Asked Modified Viewed 12,748 times
asked
Hi,
My site (hentai-enishi.com) was hacked early today. i've attached the access log. as i understood from the access log, the hacker uploaded a file called "c99.php" to attachments folder (how did he do this?) and used it to get the database password and then changing and deleting other stuff using it. my question is, is there something i can do to prevent this from happening again?
php-fusion version: 6.01.5
for now i've disabled attachments and chmod the directory to 755 but i'm not sure if this will help much.
the c99.php file i got from the server is attached too.
thanks for your help in advance.
//removed attachment for security reasons
My site (hentai-enishi.com) was hacked early today. i've attached the access log. as i understood from the access log, the hacker uploaded a file called "c99.php" to attachments folder (how did he do this?) and used it to get the database password and then changing and deleting other stuff using it. my question is, is there something i can do to prevent this from happening again?
php-fusion version: 6.01.5
for now i've disabled attachments and chmod the directory to 755 but i'm not sure if this will help much.
the c99.php file i got from the server is attached too.
thanks for your help in advance.
//removed attachment for security reasons
Edited by agl on 07-01-2007 15:31,
answered
I see, site is back again. Was there any more hacking attempts? If you use .htaccess files that I given you, still check forum/attachments; images/avatars, for .php files regularly, just to know if they try to do something. If your site will be hacked again, say it here, I would like to know it.
I hope it won't get hacked again. Good luck with your site!
I hope it won't get hacked again. Good luck with your site!
Category Forum
Bugs and Errors - 6Labels
None yet
Statistics
- Views 0 views
- Posts 34 posts
- Votes 0 votes
- Topic users 12 members
0 participants
Notifications
Track thread
You are not receiving notifications from this thread.
Related Questions