Icy Phoenix

Old Support Topics - Site Hacked?

Vortex [ Tue 21 Aug, 2007 13:28 ]
Post subject: Site Hacked?

I received an abuse notification by my host service regarding mail scripts.

Is there someone of the staff i can send the details of the notification by PM so you can help me find how they exploited the site?

Mighty Gorgon [ Tue 21 Aug, 2007 14:28 ]
Post subject: Re: Site Hacked?

Vortex wrote: [View Post]
I received an abuse notification by my host service regarding mail scripts.

Is there someone of the staff i can send the details of the notification by PM so you can help me find how they exploited the site?

Are you sure that Icy Phoenix has been hacked?

Do you have some other scripts on your sites other than Icy Phoenix?

Is your htaccess working properly?

Try to send me the log...

Vortex [ Tue 21 Aug, 2007 15:30 ]
Post subject: Re: Site Hacked?

Mighty Gorgon wrote: [View Post]
Vortex wrote: [View Post]
I received an abuse notification by my host service regarding mail scripts.

Is there someone of the staff i can send the details of the notification by PM so you can help me find how they exploited the site?

Are you sure that Icy Phoenix has been hacked?

Do you have some other scripts on your sites other than Icy Phoenix?

Is your htaccess working properly?

Try to send me the log...

No I'm not sure is IP fault... that's why I ask for your help

Sending details by pm, thanks a lot for the quick answer.

Mighty Gorgon [ Tue 21 Aug, 2007 16:24 ]
Post subject: Re: Site Hacked?

AFAIK there are no known security issues affecting Icy Phoenix...

I hope you'll be able to solve your problems.

novice programmer [ Tue 21 Aug, 2007 19:06 ]
Post subject: Re: Site Hacked?

Vortex wrote: [View Post]
I received an abuse notification by my host service regarding mail scripts.

It could be that if you use the mass mail fuction and refreshed the page several times you ordered a big sending of e-mails

Vortex [ Thu 13 Sep, 2007 15:06 ]
Post subject: Re: Site Hacked?

Well, during a maintenance I found this line at the end of (I suppose) all my files in /includes folder

Spoiler: [ Show ]

What do you think about it?

Edit: that line is also in all root folder's files.

Vortex [ Thu 13 Sep, 2007 17:25 ]
Post subject: Re: Site Hacked?

Solved, you can close.

All explanations are here: http://www.icyphoenix.com/viewtopic.php?t=2779&p=19602#p19602

Bye

Mighty Gorgon [ Mon 17 Sep, 2007 01:41 ]
Post subject: Re: Site Hacked?

Ok... closing...