ALL my sites hacked by Turkish hacker

More than 20 of my sites have been hacked. The index.php file has been modified.
I host all of them at hostable. Lucky me i had backups

Tell me your solutions to stop these kind of atacks.

contact your host compagny, it's hppened to me twice, only you can do is :
check your site vulnerability
add the newest hack fix to your CMS
reset you FTP password
change the Admin & Password in your dashboard
dont change only the DB Password but create new DB


the problem is that the server have a back door..
only the host company can fix it !

Above poster is dead on mark, you should also check to see if you have any keyloggers possibly installed on your work machine.

Get your host to add a login attempt limit, so they can't bruteforce it. Worked for me when I used to run a proxy network

ch33s3mast3r said:

Get your host to add a login attempt limit, so they can't bruteforce it. Worked for me when I used to run a proxy network

Click to expand...

If you use a decent password it is impossible to hack with brute force

Here is what you can do:

1/ Use the most recent CMS software.

2/ Make sure to change all passwords.

3/ Make sure that the PC you use to login to you site's admin panel isn't bugged.

4/ Report them. Use the log file and find out there ip's and report them to the authorities.

Remember a hacker can easily save a copy of your webpage, then modify the HTML and javascript, then re-upload the page. Therefore, it is best to never use javascript alone for input validation since it can easily be removed, and instead duplicate any javacript validation with ASP validation. Also, hidden input fields are a threat in the same way since they can easily be altered to include bogus code. Other tips include: Never give away any clues about your database, including making your input field names the same as the database field names. Always set a max length for inputs and truncate the excess.

if they left any aff links you could trace those also, good thing you have backups!