NYCPHP Meetup

[Anirudhsinh Zala]

On Thursday 30 October 2008 21:09:18 mikesz at qualityadvantages.com wrote:
> Hello Ben,
>
> Thursday, October 30, 2008, 11:29:27 PM, you wrote:
> > Hello Mike,
> >
> > I think you have your real question here:
> >
> > Having been recently hacked and several of my webmaster email account
> > names being hijacked by spammers, I am looking for viable solutions to
> > safeguard my websites and the membership of these sites.
> >
> > How about fixing the problem, instead of adding new security measures?
> > Please define "hacked"?
>
> Hacked meaning that they, the badguys managed to ftp a folder full of
> porn to one of my subdirectories and its still a mystery how they did
> that exactly. The ISP claims they took advantage of an exploit in the
> php code but has no data to support that claim thus far. So, I can't
> say that the site authorization was compromised with any certainty.

To me, this seems manipulation of URL/s on your website that has file 
uploading feature.