Hacked website

[KAHUNA]

Greets to all,been a lurker here to see how the game goes .I usually come in through the codeforce website so this is how I found out that someone has hacked their website,so I just registered to let you guys know.Anyway,looks like a great game and I hope they keep up the good work!

[Kouga]

Whoa, you are right, why did they target codeforce? [&:]

[Wade1000]

Maybe an upset hacker that targeted many sites at random.

[BigWolfChris]

They got through a back-door and uploaded a index.html file 

[HsojVvad]

I tried going there, and google said it was translated from Turkish. Hope everything will be ok.

[Tycow]

Sigh, probably some script kiddy who thinks he's l337. Probably taking out his nerdrage on the internet for being bullied at school or something. [:(]

[JonathanStrange]

Hope they pass over matrixgames.com; DW doesn't need the headaches.

[Interesting]

Wow. Just wow.

[Erik Rutins]

Very disappointed to see this, I've let Elliot know and we'll help out however we can to get his site back to normal.

[codearchitect]

Seems like he/she is a busy little bee:

http://www.zone-h.org/archive/special=1 ... =soyletmez

[DasTactic]

The site is still there...

http://www.codeforce.co.nz/default.asp

just the hacked index.html page has been uploaded. Time to move hosts I think.

[KAHUNA]

Hello again, just a head's up..the Code Force page is back in order.I just came from there and it looks normal again.Thank you Erik for passing the info on to Elliot.ok...I'm back to lurking...[:)]

[Erik Rutins]

Thanks for the heads up again, I'm just sorry Elliot had to waste some time dealing with this instead of working on DW.

[BigWolfChris]

Erik, could you please pass these tips over to Elliot if he already hasn't done these
I give these tips to all of my clients for the sake of site security

Change any ftp passwords and ensured any coding that allows file uploading has been double checked and sanitized
(Also, run a virus checker on both site and any computer used for FTP access)
Also would be better if he uses SFTP protocol to upload files as standard ftp usually sends passwords as plain text which are really easy to get using packet sniffers
Though, unfortunately many hosts don't allow SFTP which can be a real problem
If the host itself was hacked through their own backdoors, then it is down to them to secure the webserver better
But 8/10 it is usually down to a weakness in the FTP or the site coding itself