My website was hacked - Nothing to do with WebWiz

I would not be to worried I don't believe that this is a security hole in Web Wiz Forums, but rather the hacker did this some other way through a hole in the server security or some other hole on the site.

If it was a security hole in Web Wiz Forums hackers usually like to show off and will usually inform us before publishing their findings on a security web site for the world to know how clever they are. Neither of these things have happened.

If a  security hole is found you will get allot of forums hacked, they don't usually only attack one forum, they go on a hacking spree. The fact that no-one else has reported any hacking attempts suggests that this is isolated and not related to Web Wiz Forums.

Your hosting company can tell you the location of log files if they allow you access to them, but the main thing to do to prevent hackers is simply disabling write and modify permissions on your site accept for the upload directory (if you are allowing uploads in your forum). Once write and modify permissions are disabled for your site it would not be possible for a hacker to change or place files on the server in this way.

I have a sneaky suspicion as the log files didn't say much that this hacker has a site on the same shared server, and because the web host has not locked down permissions the hacker was able to place files using a script onto other sites on the same server. If the server like in this case reads a index.html page before a default.asp or index.asp then all the hacker needs to do is place an index.html file into any directory on the server and his page will come up first whenever anyone navigates to that directory with a web browser.


Edited by -boRg- - 26 May 2007 at 11:44am

Edited by ruycnd - 07 July 2011 at 6:48am