Welcome to the GoFuckYourself.com - Adult Webmaster Forum forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so please, join our community today!

If you have any problems with the registration process or your account login, please contact us.

Post New Thread Reply

Register GFY Rules Calendar
Go Back   GoFuckYourself.com - Adult Webmaster Forum > >
Discuss what's fucking going on, and which programs are best and worst. One-time "program" announcements from "established" webmasters are allowed.

 
Thread Tools
Old 08-15-2016, 10:07 AM   #1
lakerslive
Confirmed User
 
Industry Role:
Join Date: Aug 2012
Posts: 929
Who is getting security.php ???? CHECK YOUR SITES! IT can hurt SEO

For those using hostgator, who here has security.php installed across network?

I have 3 different accounts on hostgator, and they all have security.php added on every account..some kinda backdoor.

i tested it by going to domain.com/security.php and saw a "password form.

(Note: my sites are NOT connected in any way and i'm using 3 different billing info)
lakerslive is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 08-15-2016, 10:40 AM   #2
NatalieK
Natalie K
 
NatalieK's Avatar
 
Industry Role:
Join Date: Apr 2010
Location: Spain
Posts: 19,049
used to be with hostgator, personally recommend adult-hosting.com


good luck with your security problems on your php
__________________
My official site NatalieK.xxx My free porn & affiliate blog Natalie K affiliate programFirst time girls
Skype: gspotproductions - "Converting traffic into income since 2005"
NatalieK is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 08-16-2016, 06:26 AM   #3
freecartoonporn
Confirmed User
 
freecartoonporn's Avatar
 
Industry Role:
Join Date: Jan 2012
Location: NC
Posts: 7,683
log in using ftp and copy paste the source of security.php here
freecartoonporn is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 08-16-2016, 07:22 AM   #4
lakerslive
Confirmed User
 
Industry Role:
Join Date: Aug 2012
Posts: 929
When i open the php code, its all encrypted
lakerslive is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 08-16-2016, 07:26 AM   #5
AdultKing
Raise Your Weapon
 
AdultKing's Avatar
 
Industry Role:
Join Date: Jun 2003
Location: Outback Australia
Posts: 15,605
VBulletin doesn't support emojis.

*clap* Dont *clap* use *clap* Hostgator
AdultKing is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 08-16-2016, 07:26 AM   #6
Relic
So Fucking Banned
 
Join Date: Aug 2002
Posts: 10,300
Quote:
Originally Posted by lakerslive View Post
When i open the php code, its all encrypted
Post it anyway and in code tags please.
Relic is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 08-16-2016, 07:33 AM   #7
Horatio Caine
full-time aspiring rapper
 
Industry Role:
Join Date: Aug 2012
Location: Compton, CA
Posts: 5,746
Quote:
Originally Posted by lakerslive View Post
When i open the php code, its all encrypted
It's a shell script
Horatio Caine is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 08-16-2016, 11:14 AM   #8
deonbell
Confirmed User
 
deonbell's Avatar
 
Industry Role:
Join Date: Sep 2015
Posts: 1,045
Most times code is base64 encode. You can decode if you wants if just base64. But Horatio is write, 99% It a shellcode.

Are all sites on same server? Shared hosting?
Reverse IP Lookup - Find Other Web Sites Hosted on a Web Server
If nots maybe all you sites have same hole.

Whats your sites runnings? If wordpress make sures all is updated. If some bad php somewheres or old imagemagick could allow remote code exectuions and allows persons to upload shells.

Maybe nots your faults if on shared hosting.

Maybe other gfy guys can helps that knows mores than me (I expert in onlys blogspots). if he set permissions to 555, woulds that helps?
deonbell is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 08-16-2016, 11:20 AM   #9
brassmonkey
Pay It Forward
 
brassmonkey's Avatar
 
Industry Role:
Join Date: Sep 2005
Location: Yo Mama House
Posts: 76,897
what script are u runnin? i don't have them
__________________
TRUMP 2025 KEKAW!!! - Support The Laken Riley Act!!!
END DACA - SUPPORT AZ HCR 2060 52R - email: brassballz-at-techie.com
brassmonkey is online now   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 08-17-2016, 06:16 AM   #10
freecartoonporn
Confirmed User
 
freecartoonporn's Avatar
 
Industry Role:
Join Date: Jan 2012
Location: NC
Posts: 7,683
It's a shell script
freecartoonporn is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 08-22-2016, 08:11 AM   #11
lakerslive
Confirmed User
 
Industry Role:
Join Date: Aug 2012
Posts: 929
when i open in dreamweaver, it looks like <?php $rx350q7 = .....

when i googled this, i saw it on one site.. thats about it
lakerslive is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Post New Thread Reply
Go Back   GoFuckYourself.com - Adult Webmaster Forum > >

Bookmarks

Tags
security.php, hostgator, sites, tested, domain.com/security.php, note, billing, info, connected, backdoor, form, password, hurt, seo, check, added, account, accounts, installed, network, kinda



Advertising inquiries - marketing at gfy dot com

Contact Admin - Advertise - GFY Rules - Top

©2000-, AI Media Network Inc



Powered by vBulletin
Copyright © 2000- Jelsoft Enterprises Limited.