Greg K — Mon, 21 Aug 2006 17:48:10 +0000

If it was someone accessing the pages using your ftp login, it won't matter one bit what permissios you put on the file. If they are logged in as you, they have the same access you do. Changing the file permissions will just prevent people logged in as another user (or running something malicious in a script) to modify the files.

-Greg

ChrisL — Mon, 21 Aug 2006 17:31:39 +0000

1. Are you using a hosting company or running your own server?

Hosting company and i resell hosting to my customers.

2. What OS is the server running on?

Linux

3. If it is hosted, have you contacted your hosting company to notify them of a security breach on your account? They knowing the server, and having access to all the log files would be able to better tell you how you were hacked.

Yes, they have found the IP number that accessed my page using my ftp details. They say it was a russian based host. They have just said to change password using secure methods.

4. If it is your own server, check the timestamp on the file, and then check your log files to see who was logged in at that time.

How do I change the file permissions using dreamweaver ftp as that is what i normally use to upload files? Or is there a better way?

Greg K — Sat, 19 Aug 2006 13:44:19 +0000

Just to verify some things:

1. Are you using a hosting company or running your own server?

2. What OS is the server running on?

4. If it is your own server, check the timestamp on the file, and then check your log files to see who was logged in at that time.

-Greg

ChrisL — Sat, 19 Aug 2006 13:27:46 +0000

The hacked page has now changed to:

http://jenizix.info

demonhale — Sat, 19 Aug 2006 01:24:51 +0000

make sure you set the files to either at the very least a 755 by right clicking (maybe) on your ftp and setting read/write permissions... 777 file permission on files usually gets hacked in a vulnerable server... it can even write over php or html files...

ChrisL — Fri, 18 Aug 2006 23:03:21 +0000

I have no idea how do i find out and what difference would that make? I currently just use dreamweaver to ftp my files.

How did they manage to do this and what can i do to prevent it in the future? What should i do immediately as i have a reseller hosting deal with a bout 12 sites on the same server and Ill be right in **** if they all go down with this!

teammatt3 — Fri, 18 Aug 2006 21:41:41 +0000

You probably got hacked. Is your index or config file chmod to 777?