Help! I keep getting hacked!

[bpops]

I'm posting this in the MySQL forums, because my guess is the cause of this lies in MySQL security, but perhaps you all can direct me to another cause.

 

For the past several months, my site keeps getting hacked. I originally had an old PHPbb forum on it. I completely removed out of fear this was the cause. More recently, my host suspended my account saying that the mysql server was being overloaded (impossible with my small userbase). At this time, I had the latest version of phpbb. I totally removed it too out of fear this was the root.

 

But today I'm hacked again! I know exactly what happens when I'm hacked, I get iframes put into my html code linking to known malware site, ffshrie.

 

Now, how could someone possibly be changing my php files? Wouldn't they have to have ftp access? I have changed my password many times. Could this be done through MySQL somehow?

 

Any help is appreciated!

[uniflare]

Can you determine if in fact an of the php files themselves get modified, or an of the templates. (Any physical files).

 

Or are the malicous inserts in the mysql database? I would assume the latter.

 

I would believe somewhere in the code is an output of mysql data content; without htmlentities, where someone could potentially post javascript tags, disable any HTML settings for posts on the BB's.

 

There are two forms of mysql attacks i know are common -

 

[1]. MySQL Injection

Whereby users can insert malicous mysql commands directly into unsecure mysql queries.

 

[2]. CSS (Cross Site Scripting)

This is a form of CSS, where the user inputs javascript into a mysql table, eg, in his name, his name could contain the Javascript code for an IFrame or worse.

 

--

There are plenty of "PHP Security" Tutorials available on the internet. eg;

http://www.phpfreaks.com/tutorial/php-security/page2

======

 

Other than that i would move host entirely, check for trojans on your pc (like key-loggers) and see if you still get hacked, it's not impossible for hosting companies to lose private data.