URGENT! Possible hacking attempt!

Kelmas · #1 10-17-2006, 08:10 AM

Do not ever have folders with 777 permissions under your public_html!!!
If you have any, immediately check if there are any suspicious PHP files on them!

I think I found tracks of possible hacking and would like to contact server security expert of HostGator to send something I got.

***GatorRichard*** · #2 10-17-2006, 08:56 AM

Send in a ticket. Not having folders 777 is common *nix knowledge to keep most of your stuff safe but sometimes, script writers "require" it because they can't figure out the secure code.

Kelmas · #3 10-17-2006, 09:15 AM

Information sent to support email.

one19 · #4 10-18-2006, 10:46 PM

I thought stuff like open base directory restrictions and phpsuexec should make it ok to use 777 inside the public_html folders?

quietFinn · #5 10-19-2006, 05:37 AM

Quote:

Originally Posted by one19

I thought stuff like open base directory restrictions and phpsuexec should make it ok to use 777 inside the public_html folders?

If phpSuExec is used then you don't need 777 permissions.

Kelmas · #6 10-24-2006, 08:45 AM

As I was informed, phpsuexec will NOT be installed on older boxes, e.g. gator19. So there is a risk to get hacked if you have 777 folders. I suggest to monitor them and chack if there are no new suspicious files under them.