RE: [PHP] Hack on Server.
| From: | King, Justin | Date: | Fri, 20 Jul 2001 14:06:30 +0000 |
| Subject: | RE: [PHP] Hack on Server. | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-58900@lists.php.net to get a copy of this message | ||
I know this post is old by the list standards, so I don't know if you've
gotten help, check in your php.ini for these lines
; automatically add files before or after any PHP document
auto_prepend_file =
auto_append_file =
Does the auto_prepend_file line have something? If so check that out
cause he could just have
echo "Hacked by mE!!! bWAAHAHAHA";
die();
Which would make all your php scripts useless. I know you said you
reinstalled php but did you just use the same ini file?
On a side note, I'd recommend getting a linux webserver or at least
running the windows version of apache. IIS's security is flawed as I'm
sure you've seen or already known. I realize sometimes thats not
possible, my boss told me last week he wants our server to be IIS by the
end of August. Sometimes management just makes bad decisions.
-Justin
-----Original Message-----
From: "Jean-Francois Jauvin" <jfjauvin@inquesis.com>
Sent: Thursday, July 19, 2001 3:59 PM
To: php-general@lists.php.net
Subject: [PHP] Hack on Server.
Hi, my server with php on it has been "hacked" or something....., what
appened is every PHP pages displayed a certain message like "Hacked by
blah
blah blah...".
None of the HTML pages were affected, only the PHP ones....
but the scripts were not altered, I've shut down IIS, reinstalled PHP,
and
everything is back to normal... kinda strange.....
Did anyone had a similar problem...
Thanks
JF
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
For additional commands, e-mail: php-general-help@lists.php.net
To contact the list administrators, e-mail: php-list-admin@lists.php.net