One of my web sites has been continually defaced. support3.com The latest defacement effected every single default page in every single subfolder. Is anyone seeing this issue again?
Please help get this problem rectified!
-JMB
Did you look to see how they got in?
Wayne Sallee
Wayne@WayneSallee.comI am at work and don;t have a lot of time to research this continuously. How would I check this?
Use your ftp software that you use to upload your web pages. Look for a directory "logs", and download the log file for this month. It's a compressed file, so you will need to use something like winzip to unzip it. Then look at the logs and see what IP address did what. You can see what they looked at and when, and if they tried to load a page that does not exist, or if they tryed to push code to a php page.
Wayne Sallee
Wayne@WayneSallee.comThanks, I do not see a directory called Logs in the root FTP folder. There is a statistics folder, but I do not see any ZIP files int here. I am on a windows host (Kraz)