Hi: http://nakedsecurity.sophos.com/2011/10/19/analysis-of-compromised-web-sites-hacked-php-scripts/
Alas, it only looks at the results of the attack, not how the attacks are getting through in the first place. Of course, this is how: https://www.owasp.org/index.php/PHP_Top_5#P1:_Remote_Code_Execution but it'd be good to know which holes are currently being exploited. --Dan -- T H E A N A L Y S I S A N D S O L U T I O N S C O M P A N Y data intensive web and database programming http://www.AnalysisAndSolutions.com/ 4015 7th Ave #4, Brooklyn NY 11232 v: 718-854-0335 f: 718-854-0409 _______________________________________________ New York PHP Users Group Community Talk Mailing List http://lists.nyphp.org/mailman/listinfo/talk http://www.nyphp.org/Show-Participation