|
Try checking your /tmp folder or you could scan your /cgi-bin/ folders for unknown files (e.g. shell.cgi or 101image.cgi) MANUALLY.
Here are a few points to consider for server security;
- Make sure you have the most recent software (e.g. web script software, apache, php, ftp etc. etc.)
- Use mod_security (apache mod) (it's actually more effective then you'd think)
- Use .htaccess IP restriction in admin folders (If you have a static IP)
- in php.ini = safe_mode on / register_globals off
- enable open_basedir (you know why)
None of my sites have been hacked (i have some since early 2000) and never seen ANY of my site passwords floating around, BECAUSE i am also managing my own servers and don't let any fool touch my servers.
If you need any help let me know.
|