archange187

On Monday night my wife posted a bunch of pics of our 2 week old baby on our business website. On monday night they were delete along with the rest of our website.

Now me and my wife run a photography business and we depend on our clients to connect to the website and see proof's of there photos. On monday around 8pm est some kids with nothing better to do found an exploit on one of our php scripts and was able to upload his own php script to our site. I managed to restore the whole site from backups made weekly (automated) and was able to keep a copy of this really really dangerous script. It allows any webuser full access to the whole server or website sql / passwords even run commands.

Anyhow this really pissed me off.........

-Angel

__________________
Testing a viewsat Lite, extreme, ultra and 9000
40" sat-radar Stab h-h motor Invacom Quad Polar LNB True FTA

Three things are certain: Death, taxes, and ECMs. Guess which has occurred...

Batman

wow, sorry to hear it. anything involving hurting a man's family is murder one. you should goto ur local police precent and report it as a crime. you'll be surprise they can track down their IP's...hope everything goes well with u, and congratulation with ur new baby!

archange187

Thanks batman.. but the server is located in the us just because it is cheaper hosting. Other then some 15 year old from the netherlands haveing nothing better to do, i don't care. It's all restored anyhow!

As far as i can tell the ipz were bounced tho 3 proxys then i lost track of them.

Last proxy was in denmark..

-Angel