yet another php photo album-next gener.

Thank you for this information.

But if you have the release 2.3.2 installed you can rest assured that your website was not hacked THIS way!

If you have a quick look into the file /admin_modules/admin_module_deldir.inc.php
you can see that the very first line that gets executed is:

/*
* Standard Security Check
*/

if (!defined('SecCheck')) {
die("You Cannot Access This Script Directly - Have a Nice Day.");
}


They TRIED to hack you this way - you can point this out to your webhost.
The script exits at this very point if its not called from within yappa-ng
(the SecCheck variable defined) and will not execute the path - you can
check this for yourself :-)

You just cant call any of the yappa-ng modules stand alone - they have to get included from the yappa-ng main script to work.

cheers

\fritz