Hijacked by Porn

[NigelCampbell]

Hi all,

Checking through my referrer logs for my site I noticed this:

/doc/img/free-black-porn-video-clip.html
/doc/img/free-porn-star-movie.html
/doc/img/free-teen-porn-vids.html
/templates/simple/scripts/porn/free-hardcore-pic-porn.html
/templates/simple/scripts/porn/free-hardcore-porn-video.html
/doc/img/free-mature-porn-clip.html
/doc/img/free-porn-movie-clip.html
/doc/img/free-porn-site-teen.html
/templates/simple/scripts/porn/

It seems that a hacker is using pixelpost to install a folder called "porn" into the templates folder and then adding other files to a "doc" folder.

I have maually deleted them but they have returned again.

Another referrer listed is this site:
http://www.swampball.com/story/2006/5/28/214444/233

here you can see that it has been compromised by the porn hackers.

So how do I stop this happening again?

Nigel

[GeoS]

Do you have some spam in referer list or in filesystem at server? If referer list then there were some options to fight with it otherwise please write more details on PM.

[NigelCampbell]

the listing are from my server stats - nothing in the admin section of pixelpost.

There is no actual spam on my site - I think someone was just using pixelpost as a back door to set up a subdomain on my server.

It's something I'm just going to have to check manually I think.

[kidleethal]

Do some googling on 'htaccess'. There are things you can set in an htaccess file which restrict people from getting into your site (I think).

Lee


<-- righteous photo flavours ---
http://www.decoy.co.nz

[Connie]

why not chmod the template directory????

after uploading the templates, you can chmod and no ass.... can install anything there ;=)

[NigelCampbell]

Connie,

That's so simple, it's brilliant!

Thanks

Nigel