Re: Directory permissions question
| From: | Jim Lucas | Date: | Mon, 19 Apr 2010 16:01:01 +0000 |
| Subject: | Re: Directory permissions question | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-304225@lists.php.net to get a copy of this message | ||
Al wrote:
> I'm working on a hosted website that was hacked and found something I
> don't fully understand. Thought someone here may know the answer.
>
> The site has 4 php malicious files in directories owned by "system" [php
> created dirs on the site are named "nobody"] and permissions 755.
>
> Is there any way the files could have been written other than by ftp
> access or at the host root level? Clearly a php script couldn't.
>
> Thanks, Al..........
>
What version of Apache/PHP is it running?
--
Jim Lucas
"Some men are born to greatness, some achieve greatness,
and some have greatness thrust upon them."
Twelfth Night, Act II, Scene V
by William Shakespeare