Pages on site being compromised

Sexually explicit code being entered on pages

[jpcoutts]

I am having problems on my web server (shared server). It was brought to my attention that a number of pages on my site had sexually explicit text entered into them. The text does not appear in the page, but at the bottom of the code. This has made the site be tagged as containing inappropriate content. It has only happened on a few pages that are static in nature (no includes, not database access). I am currently looking at my site to see if any code has been placed there that might have caused the problem. I have also disabled all user accounts (except my own - which I changed the password to). I am wondering how this occurred. Any suggestions would be greatly appreciated.

Thanks.

[encyclo]

Welcome to WebmasterWorld jpcoutts. As it is a shared server, the exploit may have come from many different sources, including vulnerable or non-updated scripts installed by other users.

Start by getting the site off that server - you cannot trust it any more. Switch to a new hosting provider, or at the very least ask for your site to be moved to a different server with the same host. Restore your site from a known good backup, and check and update any scripts that you have installed.