I have built my husbands site from scratch (okay using DW)... and I have never had any problems with it. But for the tha last week it has been getting hacked. iframes of a page, the first time I caught it it was a virus that was put on 4 pages.

I have changed the permissions to 444 on just about all the pages and added this:

<Files php.ini>
Order allow,deny
Deny from all
</Files>

to the htaccess file... but things are still happening...

any ideas on what more I can do

__________________
Coarine Maloy, EBA
Fairway & Isle, LLC

Fairway & Isle | Calabash, NC Real Estate | Sunset Beach, NC Real Estate

Did you download a "free" FTP program?


There are several out right now that provide backdoor access for hackers.

__________________
Jennifer Karlen & Jon Karlen
Kentucky Horse Farms - Louisville Kentucky Real Estate - Lexington Kentucky Real Estate
Serving the Louisville KY metropolitan area including Jefferson County - Prospect Shelby County - Shelbyville Oldham County - Goshen, La Grange and the Lexington KY metropolitan area including Fayette County - Lexington Woodford County - Versailles Scott County - Georgetown Jessamine County - Nicholasville

I did. Core FTP Lite. I have been using it for a least a year with no problems and then all of a sudden.

Is that one of them that you know of?

__________________
Coarine Maloy, EBA
Fairway & Isle, LLC

Fairway & Isle | Calabash, NC Real Estate | Sunset Beach, NC Real Estate

Have you contacted your host? How up to date is their firewall?

__________________
Steel Building Today
Carolina Ocean Rentals
Cad Drafting Services

You may want to check your PC for malware/viruses. It may not be your site that's being hacked. It could be that some malware on your PC is adding the iframes to your html files.

A coworker sent me an html file to upload onto a website. After uploading the html file, we found that there were iframes linking to another site. At first, I was worried that someone had hacked into our site. When I checked the html file that was sent to me by email, I realized that the html file had the iframes in it in the email...before I uploaded it. We later found out that his PC was infected with malware/viruses.

So, check the html files on your PC... the iframes may have been there before you uploaded it onto your webserver.

Google has a diagnostic page that can help you diagnos the problem. Use the following url and replace "yoursitehere" with your sites name.

http://google.com/safebrowsing/diagn...rSiteHere.com/

__________________
Steel Building Today
Carolina Ocean Rentals
Cad Drafting Services

@yoyo - I did download a malware/virus program and it found 4 files that I took care of. Since then there has been no virus on the site just the iframe.

@bogart - I have used that and google says that it fou 4 files in the last 90 days (the ones I took care of already). So now I have to have google look at the site again so that it does not keep us on the "suspicious" list.

__________________
Coarine Maloy, EBA
Fairway & Isle, LLC

Fairway & Isle | Calabash, NC Real Estate | Sunset Beach, NC Real Estate

Watch out for shared servers. Some of them will let others sharing the server access all of the sites on the shared server.

__________________
Serving all your Outer Banks real estate needs and for the latest OBX events visit the Outer Banks Community Forum.

The site is hosted at Bluehost so I don't know if that throws a redflag to anyone or not.

__________________
Coarine Maloy, EBA
Fairway & Isle, LLC

Fairway & Isle | Calabash, NC Real Estate | Sunset Beach, NC Real Estate

Coarine, do you have hard copies of your website files on your PC? If so, do those files also contain the iframes?

I'm wondering if the iframes were inserted into your html code before it was uploaded onto your server...