منتدى استراحات زايد

Hello,

My forum just got hacked. Well it's a forum that I havn't even started it yet. I just worked on the skins. No plugins except "Forum Title".

The forum is hosted at HostGator so I think their servers are pretty secure.

So I'm trying to find out what did I do wrong. They only replaced the index.php with a "hacked message" and uploaded a file named gooz.php. The file has 554.741 byes and it has in the file something like:

Quote:
* Storm7Shell, a modded Locus7Shell, which is a: $count=0; while($count==0){ echo ' mod of a'; }
*
* VERSION 2 BITCH!!!!
*
* By sToRm - the 15-year-old hacker :)

Now i'm trying to figure it out how he managed to upload that file and change the index.php. The file was in the root of the forum.

Hmm... it seems another forum I have hosted on the server that got hacked once has again some strange files in the root.

What hte hell I'm doing wrong? Does anyone want the "hacking" files to give me any sugestions?

Thanks

P.S. I also found the same big PHP file on the other forum under a different name. This new forum uses 4.0.1 the old one uses 3.8.4.