Random html files appearing

[basilbrush]

Apologies if this has been covered, I couldn't find it on a search of the forum. I'm preparing to upgrade to the new version of Pixelpost, so I've been doing some digging around in my site folders making backups, something I haven't done for a long time. In the folder images/thumbs there are nearly 2000 html files containing random junk like this:

***
Madden Football 64 -- Manual
Ativan. Ativan Without Prior Prescription. .. valium ativan ? what to mix with ativan; ativan epidural ativan does it have a taste,. epidural ativan bleeds flying give nose plavix when will concurrent lipitor omeprazole use ladyman viagra opus concurrent diazepam phenytoin. 4769372; 5202128; and their concentrations peak effects dose ativan epidural given the pain go on ultracet tablets: The treatment Zoloft weight loss tablets. Alimentum to a blog search ATP: Hot Blonde feed for Ativan bladder in Google Reader... url ativan epidural ativan epidural injection ativan erowid ativan
eteamz.. Spinal Fusion. . Medications. . Epidural Administration. . Ativan. . Barbiturate Coma- Titration to Maintain. what is the difference between ativan and valium makers of valium. oxycodone
and valium for epidural valium Screen recorder short
term effects coming off valium. Lorazepam (Ativan), 10-20, 10-20, 0.05, 1-4, Drug Grasshopper of choice in hepatic failure;.. The intrathecal or epidural Anime hentai, route can be used for administration of. File Format:
SOUTHEAST ALASKA REGIONAL HEALTH CONSORTIUM MT. EDGECUMBE
1. PDFAdobe Acrobat 
Text Message Free Nokia Ringtones - View as HTML Ativan epidural injection, buy drugs in Spain
2. Germany Canada, buy drugs 
Samsung Ringtone | MP3 Ringtones in UK USA Italy, cheap internet
3. Lemony Snicket's pharmacy, 
Fashion hair accessories, corsage cheap medicine without prescripton, File Format: PDFAdobe Acrobat - View
4. Legally as HTML 
MySpace Lexapro 

***

Where has this all this come from? How do I prevent it in future? Sorry if these are naive questions, I'm just trying to do a little photoblog here, I'm not a programmer or anything.

Thanks for your help.

[basilbrush]

I guess, on reflection, these are spam comments that I didn't notice building up because I thought the comments feature was switched off. Is that correct?

[Dennis]

Actually that is not correct. Those files have been uploaded by someone else. Basically this has to do with the security of your host.

You see, Pixelpost needs to write to the image and thumbnail folder. Normally this involves userrights. But some hostingcompanies do not use the correct set of rules, so they force the use of the chmod 777 which allows everybody to write in a folder.

The first number is for the owner, the second for the group and the last one for the world. The number 7 is the maximum: read, write and execute. What needs to be done is adding the user used for Apache/PHP to a specific group and grant that group access. In that case you can restrict the access for the world to only reading.

HTH

[basilbrush]

Thanks for the response, I'll look into it with the host.