Hacked

by Sapphire (August 14, 2006)

I came to check my site tonight, and it was breaking with parse errors. My first thought was that somehow the file breaking it had gotten an extra blank line added at the end - which can sometimes mess up php pages. So I opened the file and went to the end, and found something odd: a chunk of iframe code leading to some domain I’ve never heard of.

I just spent about 20 minutes going through individual files and removing this iframe code from the bottom of them. I’ve alerted my host. I may also need to discuss it with the blog programmer, if it’s an exploitable flaw in the blog system - although this is the first I’ve heard of it. I’m thinking it might be related to permission settings I’ve messed with, or something.

In any case, the moron hacker didn’t get anything out of it. No linklove from my site, since she or he broke it. What a sad, sad idiot.

Your Ad Here


5 Responses to “Hacked”

  1. Alexander said:

    If your site is hacked, it means that your site is popular. :) Pay more attention to security and continue promoting your site.

  2. Sapphire said:

    :D I guess it does mean it’s popular, so that’s a positive spin to put on it! I’m definitely going to work with the host and/or blog programmer to make sure we’ve done all we can to prevent anything else like this. Security’s an ever-evolving issue, because the people who break it keep learning new tricks.

  3. Madeline said:

    Visted your link directory pages.
    You need more categories.
    family - divorce
    kids and teens
    hobbys - woodworking
    kids and teens - toys
    shopping - toys

  4. Sapphire said:

    You can suggest those from within the directory, Madeline. :)

  5. Another 777 permissions problem said:

    [...] I went into that folder via my file manager, and sure enough, there were about 10 files for drug stuff that I hadn’t put there.  The permissions on the file were set to 777.  Now, I don’t think I left it on 777, because I just had a meltdown due to 777s a couple of months ago, and because when I tried to change the permissions it wouldn’t allow me to, which meant I was no longer the owner of that file.  Fortunately, I have that fixperm file that that Garvin from Serendipity wrote when people were losing control of folders created on that platform’s auto-install system.  I used the fixperm script to change the permissions, and deleted all those drug files with the redirects, too. [...]

Leave a Reply

XHTML: You can use these tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

Comments will be sent to the moderation queue.