Someone Inserting Hidden Links

Forum Moderators: phranque

Message Too Old, No Replies

Someone Inserting Hidden Links

How could this happen?

FourDegreez

2:07 pm on Mar 26, 2007 (gmt 0)

Yesterday I noticed that someone had added a line of PHP at the bottom of my site's homepage to include a page from another domain. The included page consisted of a div styled with "display: none" and contained over a dozen links to porn.

I'm sure this is something that has happened to other people. I wish I knew how it happened. Maybe malware on my computer? Someone got access to my hosting account? It seems like only the homepage was affected, but now I worry that this has been snuck into other pages as well.

Anyone have any thoughts on this?

jdvjdv

2:54 pm on Mar 26, 2007 (gmt 0)

php vulnerabilities can do this, how does your server run php?

Rosalind

5:14 pm on Mar 26, 2007 (gmt 0)

There are loads of different ways your site can be hacked. Contact your host, it could be that everyone on your box has been affected. Or you could do a reverse IP lookup to check who else on your server has had links added.

The next step should be to check your scripts. If they're commonly used and you haven't updated them to the latest versions then you're a sitting duck for this sort of thing, unfortunately.