Posted by Robin Faichney on 04/10/07 18:54

A site I run has somehow been used for phishing. The url was
http://genuine.site/www/scotiabank/com/pe/

I've assured the webhost that I'm not responsible and supplied dates
of more recent ftp and control panel access, and they suggest the
relevant files have been uploaded "via the website itself" but it's a
very simple hand-coded site using PHP only to ease design changes and
such, no bb/blog/whatever features. Can any PHP guru suggest how this
might have happened? It's Windows based, unfortunately, with PHP4.1, I
think, can't check because I can't access it now, it's been disabled.
--
<http://www.robinfaichney.org/>

[Back to original message]