Our site has been vandalized a couple of times - that seems to be over now after putting in an "open" password for doing changes - like described in this subject http://article.gmane.org/gmane.comp.web.wiki.pmwiki.user/50436/match=hacking However - the latest weeks there has been a change directly in the php-code - making references to a malicious site in one or another way (I'm not so good at this code stuff!). I asked my servivce provider if there were possible to do changes in the system files on his server - and he replied that the security on the server was good enough - and that any hacking was possible because of - I'll try to translate - "This type of hacking is due to security holes in the code - not on the server. We cannot do anything from our side. As a rule this is caused by badly secured schematic code / form code (??) " I have problems argueing with them - partly because of my little knowledge about this - partly because of their attitude. Anyone that has an idea about this problem ? I've run the Site Analyzer and the only thing that came up was that ?action=diag ... enabled No other vulnerabilities. -- mvh Erik Haagensen Oslia NO-2550 Os i Østerdalen
_______________________________________________ pmwiki-users mailing list [email protected] http://www.pmichaud.com/mailman/listinfo/pmwiki-users
