Index page hacked.

[Mark Evenden]

Last December and more recently, Sunday, our index page was defaced by what can only be described as "anti western comment"

Anyway I contacted my suport and was told to alter the write permissions from 777 to 775 on all my files, as the most likely cause was a "PHP code injection"

So, I did this, but with the acatalog write permission set to 775 the shopping cart refuses to work - so I changed it back and its fine.

My dilema is of course, I dont want the site defaced again, but I need it to work!

I am clearly out of my depth here, any thoughts?

MJE

[dave_finlayson]

Are you sure it was 775 they advised. The acatalog folder should be 755.

[Mark Evenden]

Many thanks, you are correct, it was indeed 755 - just altered it and its working OK.

MJE

[pinbrook]

You need to contact your host, if it is a php hack it has to be addressed by them, there is nothing you can do to stop it happening again. The vulnerability in PHP might not be on your site, but hackers have found a vulnerability on the server and are utilising this to hack all sites on the server