Re: hacked!!
| From: | Ashley Sheridan | Date: | Fri, 03 Oct 2014 15:17:45 +0000 |
| Subject: | Re: hacked!! | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-323889@lists.php.net to get a copy of this message | ||
On 3 October 2014 16:07:52 BST, Jim Giner <jim.giner@albanyhandball.com> wrote:
>On 10/3/2014 11:04 AM, Richard wrote:
>>
>>
>> There are a range of potential vectors, potentially including your
>> php code, so I would suggest looking at the server (both the web
>> server and system-level) logs to see if you can identify the
>> source/manner.
>>
>> - Richard
>>
>>
>I have no files with passwords stored in the web accessible tree.
>Also, I have no idea what to look for in any logs.
One possible (and likely vector) is tgurd-party plugins. For example, I had the same through a
tinymce plugin vulnerability.
Thanks,
Ash