<HTML><BODY style="word-wrap: break-word; -khtml-nbsp-mode: space; -khtml-line-break: after-white-space; ">My Site.SideBar was hacked. I only see this when in the edit mode and I hadn't edited since probably November 2006. <DIV><BR class="khtml-block-placeholder"></DIV><DIV>Here's what I see:</DIV><DIV>--------</DIV><DIV><FONT class="Apple-style-span" size="3"><SPAN class="Apple-style-span" style="font-size: 12.5px;">Nice! Happy New Year! --- <a href="</SPAN></FONT><A href="http://home.no/hydrocodone356/index.html"><FONT class="Apple-style-span" size="3"><SPAN class="Apple-style-span" style="font-size: 12.5px;">http://home.no/hydrocodone356/index.html</SPAN></FONT></A><FONT class="Apple-style-span" size="3"><SPAN class="Apple-style-span" style="font-size: 12.5px;">">hydrocodone</a></SPAN></FONT></DIV><DIV><FONT class="Apple-style-span" size="3"><SPAN class="Apple-style-span" style="font-size: 12.5px;">---------</SPAN></FONT></DIV><DIV><FONT class="Apple-style-span" size="3"><SPAN class="Apple-style-span" style="font-size: 12.5px;">When I open the file: I see stuff added to the top of the file:</SPAN></FONT></DIV><DIV><FONT class="Apple-style-span" size="3"><SPAN class="Apple-style-span" style="font-size: 12.5px;">--------</SPAN></FONT></DIV><DIV>author=Akela_gay</DIV><DIV>csum=</DIV><DIV>host=209.160.64.106</DIV><DIV>name=Site.SideBar</DIV><DIV>passwdedit=nopass:</DIV><DIV>rev=56</DIV><DIV>targets=</DIV><DIV>text=Nice! Happy New Year!%0a---%0a%3ca href="<A href="http://home.no/hydrocodone356/index.html">http://home.no/hydrocodone356/index.html</A>">hydrocodone%3c/a></DIV><DIV>time=1166972157</DIV><DIV>author:1166972157=Akela_gay</DIV><DIV>-----</DIV><DIV>I sent an email to the ISP which appears to have this IP.</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV><SPAN class="Apple-style-span"><B>How do I prevent this in the future</B>? I'm supposed to be the only one with access. </SPAN></DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>Also, what's the best way to fix it. Copy in my back-up file? Or will that break something? I did this and it seems to work OK.</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>PmWiki v. (don't know where to find it. Searching for version turned up 1825 pages). But the many of the pages are dated mid-August 2006.</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>I searched on the achives and saw a mention of a similar problem. I do find it hard to believe I was the only one. If I took ten minutes to figure out the date I could find out when it happened.</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>Thanks.</DIV></BODY></HTML>