Thread Starter
webpix
(@webpix)
Some details:
The host is HostGator
The hack:
somehow, DZ-Ghost uploaded a php shell file
then from that point – they went thru and changed all of the index files
(like samboll stated)
I dont know how – but it appears, from the logs; that a 404.php was uploaded
What bothers me – is that if someone can upload that kind of php/shell – what’s stopping them from uploading Haxplorer and really doing some damage
Mostly I just would like to know – how they uploaded anything – so I can become better at security……..
i found this one today
http://www.fahlstad.se/wp-plugins/wp-forum/
if you use the admin area to upload and install this plugin
IT WILL BLOW OUT YOUR SITE
HOWEVER –
If you upload via FTP
Then activate thru the admin panel
EVERYTHING works fine
At first I was not happy with it
But once I got it running
It’s exactly what I was looking for
A forum in wordpress