Re: Possible My Website was hacked... with PHP... please tell me what this is???

From: Date: Thu, 31 Jul 2003 09:32:24 +0000
Subject: Re: Possible My Website was hacked... with PHP... please tell me what this is???
References: 1 2  Groups: php.general 
Request: Send a blank email to php-general+get-157688@lists.php.net to get a copy of this message
Well, now I feel slightly embarassed. I wasn't thinking of the possibility your site was hosted. My apologies for being a little overly dramatic. > Yeah, definatley reason to explore the possibilities... But this is > really my own stupid fault it got there in the first place... I had an > image upload form and I didn't tell it only to accept image/jpeg or > image/gif So you know how it probably got there. That's a good thing. The next step would have been to check whether the form would actually run. If it didn't, then _maybe_ you had some breathing room. > Resolution... I deleted everything, and took down the upload form and > notified my webhost... I guess it wasn't the first time they've seen > this... So the are taking action on it and probably canceling my > account... LOL... That's probably the safest and quickest approach, anyway. And I'm sure they appreciate the notification. I sure would. -- Joel Rees, programmer, Systems Group Altech Corporation (Alpsgiken), Osaka, Japan http://www.alpsgiken.co.jp

« previous php.general (#157688) next »