All my html & php files hacked

  grumpy-git 07:39 07 Apr 2008

As yet, I don't know how it was done, but somehow all the php & html files in my web space have been hacked with an iframe added.

There are many hundreds, possibly thousands of files that are now corrupted.

Coppermine gallery, phpbb board, lots of small web sites all out of action. I've hopefully got backups of it all, but over 2gb in total in my web space.

Any comments on how to avoid this, or any quick way to get up & running again?

I have changed my ftp password, but nobody else knew what the original was.

  mco 10:47 07 Apr 2008

is all I can give. A wordpress site of mine was hacked the other week - all they did was replace header php file but I still have no idea how they did it as my passwords, like yours, were known only to me.(and nobody could register on the site)

  grumpy-git 11:13 07 Apr 2008

Thanks mco,

What I can't understand, apart from how they accessed my files, is how they all appear to be updated at the same time. To have done them individually would have taken a long time, and the updated times would have been spread over a long period.

Must be some sort of automated device/worm etc.

Shouldn't the host be able to block this sort of thing?

  grumpy-git 17:31 09 Apr 2008

See this new topic, for anybody who has Coppermine gallery

click here

I'll mark this as resolved, and leave it running in the above topic

  mco 20:19 09 Apr 2008

thanks for this - I don't have copper mine but I do have wordpress which was mentioned in all that and it could well be the same issue as yours.

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

The Evil Within 2 review-in-progress

InVision Studio takes on Adobe XD and Sketch

Camera tips to take better iPhone photos

Comment transformer un iPhone en borne Wi-Fi ?