Hi!
Not sure if it the same one, there's a new IIS exploit that'll
change the main page.but only in memory. It's known as Code Red Worm
at the cert.org site.
I noticed it after I had lots of weird requests in my httpd logs
for about 8 hours last night (+800) which I thou
I know this post is old by the list standards, so I don't know if you've
gotten help, check in your php.ini for these lines
; automatically add files before or after any PHP document
auto_prepend_file =
auto_append_file=
Does the auto_prepend_file line have something? If so check
Must of been some ome hacker to find an httpd.conf on an IIS server :)
On Fri, Jul 20, 2001 at 10:12:25AM +1000, Brian White wrote:
> Maybe the hacker got into the httpd.conf and set the auto-prepend setting
> to a file that contained the message.
>
> Brian
>
> At 00:34 20/07/2001 +0300, [EMAIL
I think the following link might shed some more light on the situation:
http://news.cnet.com/news/0-1003-200-6604515.html
HTH
Sam Masiello
Software Quality Assurance Engineer
Synacor
(716) 853-1362 x289
[EMAIL PROTECTED]
On Fri, 20 Jul 2001 10:12:25 +1000 Brian White <[EMAIL PR
Maybe the hacker got into the httpd.conf and set the auto-prepend setting
to a file that contained the message.
Brian
At 00:34 20/07/2001 +0300, [EMAIL PROTECTED] wrote:
>Hi Jean-Francois!
>On Thu, 19 Jul 2001, Jean-Francois Jauvin wrote:
>
> > Hi, my server with php on it has been "hacked" or s
Hi Jean-Francois!
On Thu, 19 Jul 2001, Jean-Francois Jauvin wrote:
> Hi, my server with php on it has been "hacked" or something., what
> appened is every PHP pages displayed a certain message like "Hacked by blah
> blah blah...".
> None of the HTML pages were affected, only the PHP ones
6 matches
Mail list logo
