LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Urgent Help Needed (https://www.linuxquestions.org/questions/linux-security-4/urgent-help-needed-154492/)

rankxeros 03-07-2004 03:30 AM

Urgent Help Needed
 
Someone entered my server doing something at all my site.
Now if you go to my site pages there is this code in all page :
iframe SRC="ht tp:// [edit]link removed[/edit]" WIDTH=1 HEIGHT=1></iframe> but if i download a page to remove this line i can not find it.
This code is in all pages of all my site so i think that someone make some modification to my server configuration.
Can someone help me with this BIG problem ?
If you want to see what happen to ma sites pages try to look here :
[edit]link removed[/edit]

PLEASE HELP ME, thanks.

chort 03-07-2004 05:23 AM

Hmmm, something about this makes me suspicious... New poster, 1 post, has "rank" in the username, posting links to pages which appear to have counters/ranking scripts in them...

It seems to me like this is just a trick to get people to bump your hit count.

If you're really serious, post the names of the operating system and webserver that you're using and we'll go from there.

unSpawn 03-07-2004 07:45 AM

Now if you go to my site pages there is this code in all page (...) but if i download a page to remove this line i can not find it.
What browser are you using? If you're not using Linux, (like using M$IE), then you better check for modifications (BHO's) first. If you're using Linux OTOH, try downloading the page tru something basic like "wget" and diff with what you saved from your browser.

Like Chort in essence said, the more details the better. I removed the linkage, I don't want pr0n links on LQ. Anyone who is interested in fixing the problem can email Rankxeros or me.

rankxeros 03-07-2004 11:31 AM

I'm serious but i must to see you some url to explain you my problem.

chort 03-07-2004 04:25 PM

Quote:

Originally posted by rankxeros
I'm serious but i must to see you some url to explain you my problem.
No, you must post your OS and webserver to explain the problem. Until you do, no one is going to help you. Also, stop trying to get people to visit your page as it really doesn't have anything to do with solving your problem (and it violates the rules about pornographic content on LQ--in fact, that's the very first rule).

cyph3r7 03-08-2004 04:32 PM

Chort is layin the smack down :tisk:

what are the odds on him returning w/ what we need?


All times are GMT -5. The time now is 01:59 AM.