Hacked....

PHP programming forum. Ask questions or help people concerning PHP code. Don't understand a function? Need help implementing a class? Don't understand a class? Here is where to ask. Remember to do your homework!

Moderator: General Moderators

Post Reply
veneerz
Forum Newbie
Posts: 8
Joined: Fri Sep 13, 2002 5:57 pm

Hacked....

Post by veneerz »

HI Guys,
Looks like my problem which I posted was caused by an attacked which succeeded. After receiving few calls, regarding unauthorized charges from my not so often customers I decided to format my computer (just in case) and also check our PHP scripts.
I found this code which was not there earlier:
passthru($cmd);
I already found out what it does and our back_history shows that someone has been hacked the server. Our hosting company is no help at all. Do not use Hostway! first they told me that they delete all access logs every two days and if I want logs from before I have to pay $100. I asked them what if police requests these logs from me, will I still have to pay you?
Anyway, I changed MySQL password and FTP password as well. I there a way to find out if Trojan is still resident on the server. Damn Hostway so called tech support team does not know what to do.
If anyone knows how to find out who did this and find out if we can protect ourselves please let me know.
User avatar
phice
Moderator
Posts: 1416
Joined: Sat Apr 20, 2002 3:14 pm
Location: Dallas, TX
Contact:

Post by phice »

You can't do anything remotely. Keep trying tech support. If they dont fix the issue, back up your data from the server, and move to a new host.
Image Image
User avatar
Takuma
Forum Regular
Posts: 931
Joined: Sun Aug 04, 2002 10:24 am
Location: UK
Contact:

Post by Takuma »

If they delete the server log every 2 days how can you get the one before them?
User avatar
hob_goblin
Forum Regular
Posts: 978
Joined: Sun Apr 28, 2002 9:53 pm
Contact:

Post by hob_goblin »

Takuma wrote:If they delete the server log every 2 days how can you get the one before them?
Backups.

Plus, that really doesn't help him.

My idea: get a new host. http://www.insiderhosting.com ;)
User avatar
Takuma
Forum Regular
Posts: 931
Joined: Sun Aug 04, 2002 10:24 am
Location: UK
Contact:

Post by Takuma »

It saids $20 but is that per month or per year? If it per year it is extremely cheap.

P.S. If you backde up all the log file wouldn't that be quite big?
User avatar
hob_goblin
Forum Regular
Posts: 978
Joined: Sun Apr 28, 2002 9:53 pm
Contact:

Post by hob_goblin »

Month, and no, not really.
Post Reply