Back Home

Open Designs

Community. Driven.

General Talk: HELP!! Someone is hacking my site??

Bottom of Page

1 to 8 of 8

  1.  
    • CommentAuthordcarter
    • CommentTimeFeb 2nd 2007
     
    Hi guys.

    I'm after some urgent help. Someone keeps hacking my website and replacing my index.html with a different index.html (which contains a worm/virus). Which. of course, is annoying anyone who visits my site.

    I don't know much about web servers and stuff, but is there anything I can do to protect my site?

    How is this person getting access to my site to upload a new index.html file?

    Any help would be very much appreciated.

    Thanks. David.
    •  
      CommentAuthorDENiAL
    • CommentTimeFeb 2nd 2007
     
    Posted By: dcarterHi guys.

    I'm after some urgent help. Someone keeps hacking my website and replacing my index.html with a different index.html (which contains a worm/virus). Which. of course, is annoying anyone who visits my site.

    I don't know much about web servers and stuff, but is there anything I can do to protect my site?

    How is this person getting access to my site to upload a new index.html file?

    Any help would be very much appreciated.

    Thanks. David.


    Yer best bet, would be to change all your password information IMMEDIATLLY, and if you share the same server password with your email, change it too. That should cure the problem. Check your logs as well, this should let you know exactlly how they are accessing your site.
  3.  
    Change every password related to that website, be it CPanel, email, ftp, mysql, etc.

    Also, if your using a CMS or anything to manage your content, make sure your running the latest stable version as there could be a loophole in that.

    Just general common sense really, if someone steals money from your bank account, what you do? Change pin codes and notify the bank asap. So apply the same thing here, let your host know and see if it's happening to sites held on the same box as yours, if so it could be a host problem. Just explore all possibilities.
    • CommentAuthordcarter
    • CommentTimeFeb 2nd 2007
     
    Christopher. Denial. Thanks!!

    Have changed all passwords and notified my hosting company. I have a few clients that use the same hosting company (recommended by me!) - so I hope it's not a host problem.

    Thanks for your help.
    • CommentAuthorDraicone
    • CommentTimeFeb 2nd 2007
     
    dcarter,

    Ask your host if there are any known vulnerabilities in the software they use. Also, check if you have any SQL injection problems; consider one of those free online vulnerability scanners. Do you run any scripts on the site, or just static HTML?
    • CommentAuthordcarter
    • CommentTimeFeb 5th 2007
     
    Draicone.

    I do run a CGIEmail script on the site which might be the problem. As for my host - still waiting on a reply to my urgent support call. Might be time to look for a new host, I think.

    Thanks for the suggestions.
    •  
      CommentAuthorNickyD
    • CommentTimeFeb 5th 2007
     
    David:
    You may want to contact off line David Hermann. He has a site similar to yours, and his site was hacked a couple of weeks ago with some weird stuff on his home page. His web address is:
    http://www.free-css-templates.com/
    I hope he does not mind me posting this here. He is one the nicest people you would meet on line. I think he is also a member here. Good luck.
    • CommentAuthordcarter
    • CommentTimeFeb 6th 2007
     
    Thanks NickyD.

    I'll contact him off line.

    Still no response from my hosting company sad

1 to 8 of 8

  1.