Porn Link Spammers Access Folder on Server!!

[zooki]

Hi,

I am on the latest Vbulletin.. . I think that there would be other people at risk too! I did a check on Google Webmaster tools and i went to Content Analysis, pages with Short Meta descriptions... I could not believe my eyes, there was list of urls that I had never seen, that were uploaded onto my server somehow.

I think it is my old Attachments folder, but I dont have attachments there.. they are in my forum/files directory.....

There is a directory on Forum root called attached and it is folder full of Spammy Html files to Porn, I dont know how it got there.. but, it was set to 777.


How do these spam people get access to my folder?? What should I do?

Do you think Scanalert hacker protection is good to prevent this stuff. another question I am on Managed Hosting, so whose responsibility is it!?

[Steve Machol]

Because it's 777 and it's in a web-accessible directory. You should move it above the main web directory.

[zooki]

Its happened again, this time inside Forum folder, in my signaturepics folder.

There is an index file, which can be seen on Google search, Spam page for Pharmaceutical things...

*sighs* I thought they could not access these folders, how did it happen?

What am I to do to stop this?

what should permissions be set at? for folders like for Attachments or Modules, 755 ?

[Steve Machol]

Post #2 still applies. If you are going to store these in the file system instead of the database, then that directory must be world-writable.

[steven s]

Post #2 still applies. If you are going to store these in the file system instead of the database, then that directory must be world-writable.

I never can remember above root or below root, so. . . .
The safest place is to have an attachments directory in the same directory as your public_html directory? /home/

[Steve Machol]

Above the public_html directory.