Geeklog Forums

my index.php has been replaced by someone with a text file containing only:
"infektion group e nois na noia"
Have I lost everything? Is there a way to recover?

the website is www.gallarotti.net
How did they do something like this? No one in the world knows my passwords to access through FTP to my host
What did happen?

All right I have copied back the index.php files I had in a backup on my own machine.
But how did anyone get to be able to replace my index.php for both 4images and geeklog???

Well, "never say never", but I don't think there's a way to upload an index.php through Geeklog itself.

I can't seem to find anything about a known exploit for 4images either.

Do you have any other plugins or add-ons installed?

bye, Dirk

Check with your hosting provider to see if they would crawl over their access logs to help determine when and how they gained access. You will need to give them an aproximate time and date this happened so they can check. See if they can give you a snipit of the log where the offense occured so that you can find the offender. Also, it would help if you showed them your error and access log for that time period to help them in the investigation. Hope this helps.