About Defacing!

Apache security question

[medions]

Hi all,

Can you please help me, I'm having trouble with some hackers that defacing my website all the time, what can I do to recist this?

My VHost is like this:

<VirtualHost *>
ServerAdmin [e-mail]
DocumentRoot /home/virtual/domain.com/public_html
ServerName domain.com
ServerAlias www.domain.com *.domain.com
php_admin_value safe_mode 0
php_admin_value open_basedir "/home/virtual/domain.com"
</VirtualHost>

[Birdman]

How are they defacing the site? Are they abusing an HTML form or do they actually have write access to the serer?

[mack]

In most cases the hackers are attacking insecure scripts or programs that are installed on a server, and not the server directly.

It it importaint to find out exactly how they are gaining access and take action to prevent it hapening in the future. If you have scripts running that are not secure, and the writter is offering no fix, do yourelf a favour and find safer alternatives.

There are various things you can do to limit security flaws such as re-naming insecure files.

It is also very importaint to make sure you follow install instructions to the letter. One of the biggest security threats and also one of th emost avoidable is people leaving install scripts in place after they have finished the actual instalation procedure.

Mack.