RE: [Phpgedview-talk] SAMARINDAHACK

[Cozens, D. <dav...@eu...>]

Sorry, I havn't yet managed to identify when and where the hacker got in. I
am suspicious that whatever was done to the site was left as a bomb and it
went off when I uploaded media to the site. I have no proof of this though.
I have also not yet managed to find anything strange in the access logs,
except some search strings looking for login.php in the url.

John has already started to help me track this down. I'll spend more time
tonight sifting through the logs.

I think this is going to be the prod that gets me to move to the 4.0 betas.

The lesson of the story as always is to take regular backups. I think I've
lost about 4 or 5 hours work and I have the original data. It's going to
take much longer finding out how I was attacked so that I'm safe when I
re-publish my site.


Regards Dave

-----Original Message-----
From: php...@li...
[mailto:php...@li...] On Behalf Of Chris
Knight
Sent: 07 April 2006 09:18
To: php...@li...
Subject: Re: [Phpgedview-talk] SAMARINDAHACK

Dave,
Bad luck indeed.
Can you look at your sites stats and tell us what IP the hacker used?

Thanks,
Chris

David Cozens wrote:
> I'd be really careful with this.
>  
> within my phpGedViw directory all of the files at the top level have 
> gone, my as have my index folder and media folder,  I've certainly 
> lost some stuff. I have now deleted the index.html that was injected 
> into my site.
>  
> The attack happened when I was uploading an image file
>  
> Dave
>
>
> HELP
>  
> My site has just been hacked. I was in the middle of using phpGedView 
> when my main phpGedView screen has disappeared to be replaced by a 
> hacked page titled #SAMARINDAHACK komenk was here.
>  
> Does anyone know how to get rid of this or if I have to reinstall how 
> do I protect against it.
>  
> I did have an install of PGV 3.3.8
>  
> Many thanks for any help Dave


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
Phpgedview-talk mailing list
Php...@li...
https://lists.sourceforge.net/lists/listinfo/phpgedview-talk