Website security...

[PerryCox]

Twice now I've had my website "hacked" and had malicious scripts placed on the homepage. I'm quite sure my password is secure, so does anyone know how this is being done, and more importantly, what I can do to prevent it.

FYI, the first attack had a php script added to the root(?), the second attack had a script placed at the bottom of the html on my homepage. I've got rid of any evidence as I just removed both bits of naughty code, rather than save them to see what they do.

TIA

PC

[Shark.]

If your running a forum , there is a firewall you could put in place , but it would look less appealing to genuine members when they first go the homepage.

Shark.

[PerryCox]

It's a commercial website (but not e-commerce, just business info). I've looked into it and there's a .htaccess blacklist I can put on (not exactly sure about how it works but it's supposed to be good).

Apparently access is gained by brute forcing the ftp password, so it's a combination of letters, numbers, capitals and punctuation now

The real damage is that the site gets listed by some security products as malicious

[P3T3]

Originally Posted by PerryCox

It's a commercial website (but not e-commerce, just business info). I've looked into it and there's a .htaccess blacklist I can put on (not exactly sure about how it works but it's supposed to be good).

Apparently access is gained by brute forcing the ftp password, so it's a combination of letters, numbers, capitals and punctuation now

The real damage is that the site gets listed by some security products as malicious

If they are brute forcing your pword mix it with higher lower case and SIMBULS as usaly when brutforcing it wont use simbuls as well as letters and numbers you should be ok.

[welshy9]

they might have got into the acual server your sites hosted on and affected it that way ,

if your site got hacked , the server your using isnt setup right or secured enoughf ,

i got a server and do hosting and all the sites i host has never been hacked , had a few attempts but the server security and the anti ddos stoped it all

if you need any more help m8 give me a pm or add me on msn

admin@offshoreguy.co.uk

[andybr1ggs]

Originally Posted by welshy9

they might have got into the acual server your sites hosted on and affected it that way ,

if your site got hacked , the server your using isnt setup right or secured enoughf ,

i got a server and do hosting and all the sites i host has never been hacked , had a few attempts but the server security and the anti ddos stoped it all

if you need any more help m8 give me a pm or add me on msn

admin@offshoreguy.co.uk

welshy how much is your hosting ? I am currently with siteground looking to transfer my domain to another host, if the price is right.

[welshy9]

ive just added you on msn m8 ,

i charge £2 pcm i cant offer unlimited but can sort a good deal for you ,

servers in netherlands so no worrys with any DMCA