Posted by David on 08/08/06 17:24

easygoin wrote:


<snip>

>
> Just as no one has mentioned this - I wouldn't assume its your ISP
> unless you have confirmation from them and sometimes hosts (being one
> myself) have set their servers up to add certain files / folders by
> default - usually an .htaccess file and this might be where it came from.

Can you please show me one web hosting provider that places by default a
robots.txt file that disallows search engines. Seeing that you are "in
the business". I have yet come across a web provider that places such a
restriction as that. And yes I do know that as a default some providers
do add the .htaccess file, but I know none that go into a customers site
and than adds or removes information. If I did find out that a sysadmin
did or was doing that without my knowledge I would run fast to find a
different provider......

>
> But rather as default - change your FTP password to something secure
> using different cases and numbers, and also change any hosting passwords
> if you have a dedicated / reseller / managed etc server - just in case
> some malicious personage has decided to "secretly" sabotage your site
> as this would indeed be a very good way to do this...

It is well too late to think about changing your passwords after
"someone" has gotten into your system. Who knows by the time you found
out they were there, what they had changed or have done. The only way to
make sure that they do not further damage is to wipe out and reinstall
your stuff. But than again a reinstall isn't a 100% deal as if one was
making a backup regularly they might have backed up infected files and
at that point would be just copying them back.


as most have
> backups (don't we) of our online sites ;).

The odds are no.......

>
> Just a thought - Dimitri

[Back to original message]