Abuse Of A Php Contact Script, someone is the bcc to send o

[najlee]

Hi -

I have had a message today from my hosting company to tell me that one of the sites on my hosting account is having it's php code abused. Apparently someone is manipulating the php code from the contact form to allow them
to add Bcc addresses.

Any ideas on what I need to do to close this loop hole?

Thanks.

[rsstites]

There is a lot of things you will need to do.

First off you should get with your hosting company as soon as you can, hopefully they will help you.

Things you need to do is to find all files owned by "nobody", and determine if they are supposed to be there, or if they were uploaded by your guy.

You need to locate all folders that are are chomded 777, and fix it. You should do everything in your power to avoid 777's.

You may not have authorization to delete the malicious script, or change the chmod. In that case you should hvae your host fix it.

There is much more you need to do, but most of it is clearing out malicous files that were uploaded to your server.