One of my client sites has been hacked!!!!! (v 4.9.4)

every folder now contains two files: default.php & index.php

the contents of each file is:

"IMAN_TAKTAZ WAS HERE !!!

   www.ashiyane.org

ashiyane_org@yahoo.com"
 

 Fortunately that's all that they've done.

Can someone please tell me

1. how they got in, and

2. what I have to do to prevent it happening again

TIA

MartyNZ

in this type of case (new files deposited in multiple folders), it's typically a non-dotnetnuke problem e.g. dotnetnuke has no code that supports uploading files to the root folder. In the majority of cases the problem is a missing Microsoft security patch either for the OS, IIS or the database server (SQL) if on the same server. I'd recommend you ensure your server has all expected security patches, and also (as a previous poster mentioned) change your ftp details. Finally I'd recommend you virus check your pc(s) as some virus's will capture keypresses (such as ftp details) and later use them to upload content.

---

Buy the new Professional DNN7: Open Source .NET CMS Platform book Amazon US