Menu
Community /Pin to ProfileBookmark
@NogDogOct 20.2009 — #
While it might be interesting to do so, knowing what the inserted code is does not really help you prevent it from being inserted into your site again, other than, I suppose, using any info in it as something to search on to find out if there's a specific security hole.
As far as preventing:
Only use 3rd-party code that you trust, and make sure you use the latest versions.
Use strong passwords on your web host: login, FTP, and database. If you share them with anyone for some reason, change them as soon as that someone no longer needs them. Since you've been hacked, be sure to change all of them now.
Ensure all directories/files that do not have to have write permission for anyone other than the owner only allow writing by the owner. This is mainly important for shared hosts.
If this is an "important" site to you and you are on a shared host, consider moving to a dedicated host or at least a virtual dedicated host.
Get yourself a copy of [i]Essential PHP Security[/i] by Shiflett and read it a couple times (it's short).
php decode hacked my site
i found a problem on my site and when i compare the files on the server with my local files i found that every page (*.js or
[B]<?php /**/eval(base64_decode(‘aWYoZnVuY3Rpb25fZXhpc3RzKC
or a javascript line
[SIZE=”5″][COLOR=”red”]so i knew that my site has been hacked..
so
1 – [COLOR=”Red”]i want to know how to prevent anyone to hack my site?
i made on every textfield or textarea on posting or getting it the htmlspecialcharacter($_POST[‘name’])
[B]is this true? and can it help me?
2- [COLOR=”Red”]how did anyone hack my site??
3- [COLOR=”Red”]how i can know what does this code mean???
thanks in advance and have a nice day
Sign in
to post a comment2 Comments(s) ↴
0
@NogDogOct 20.2009 — #What is the code in its entirety... post it in a code box. We can decode it....
[/QUOTE]
While it might be interesting to do so, knowing what the inserted code is does not really help you prevent it from being inserted into your site again, other than, I suppose, using any info in it as something to search on to find out if there's a specific security hole.
As far as preventing:
Only use 3rd-party code that you trust, and make sure you use the latest versions.
Use strong passwords on your web host: login, FTP, and database. If you share them with anyone for some reason, change them as soon as that someone no longer needs them. Since you've been hacked, be sure to change all of them now.
Ensure all directories/files that do not have to have write permission for anyone other than the owner only allow writing by the owner. This is mainly important for shared hosts.
If this is an "important" site to you and you are on a shared host, consider moving to a dedicated host or at least a virtual dedicated host.
Get yourself a copy of [i]Essential PHP Security[/i] by Shiflett and read it a couple times (it's short).