acatalog folder hacked.

[bekyed]

Hi.

The folder here

acatalog/index.html has been hacked.

The permissions are open at 777 however i have changed them to 755 and 705 and now the add to cart to the cgi bin files now brings up an error.

Change it back and they are fine.

v8 sorry.

Any help appreciated please.

[Duncan Rounding]

Yiou will need at least 755 on cgi-bin and usually 777 on acatalog but you might be ok with 755 on that folder too. 705 on cgi-bin will not work.

[bekyed]

Hi. Thats the problem Duncan with 777 on the acatalog folder these are world-writable, is there any other way?
The cgi-bin is set to 755.

Thanks.

[Duncan Rounding]

Everybody runs with 777 on acatalog, some are ok with 755. If you want the store to work you'll have no option.

How was your page hacked?

[bekyed]

It had the page changed, luckily we have no links to the index page in the catalogue so no harm done.
Incidentally which page generates this one, it's not called index.html is it?

Thanks.
Wayne.