PHP injected into server root 2

[audiopro]

I recently had a malicious PHP script added to my server root.
I have all the usual input checking in place but it somehow still got through.
This is on a site which is only partially live.
Can anyone suggest somewhere to read up on prevention measures?

Keith

http://www.studiosoft.co.uk

 

[ChrisHirst]

for cPanel


grep username /usr/local/cpanel/logs/access_log

Will list cpanel access times and actions for that account user

Chris.

Indifference will be the downfall of mankind, but who cares?
Time flies like an arrow, however, fruit flies like a banana.
Webmaster Forum

 

[jpadie]

Am I alone in hating those admin guis?

 

[vacunita]

Nope. I despise cPanel with a passion. I'm perfectly capable of setting up web directories, MYSQL databases, and other configurations without a GUI. I hate phpmyadmin even more.

Give me SSH access any day.

----------------------------------
Phil AKA Vacunita
----------------------------------
Ignorance is not necessarily Bliss, case in point:
Unknown has caused an Unknown Error on Unknown and must be shutdown to prevent damage to Unknown.

Web & Tech

 

[audiopro]

I will agree with your comment about PHPmyadmin but a server GUI is essential for those of us who are new to all of this.
Like many GUI's however, cPanel appears to have been written by geeks, for geeks and the instructions are only useful to those of you who don't actually need them.
Welcome to the world of modern computing.

Keith

http://www.studiosoft.co.uk

 

[ChrisHirst]

Am I alone in hating those admin guis?

No you aren't, but when you have clients that can, need to or want to manage their own hosting you have little choice but to provide a GUI for them. Letting them loose with shell access even when jailed/chroot'ed is simply asking for trouble.

Chris.

Indifference will be the downfall of mankind, but who cares?
Time flies like an arrow, however, fruit flies like a banana.
Webmaster Forum