got hacked thorugh : faq.php?cmd=ls%20-a
 

Hello there,

I always had problems with 1 forum. Strange "shell.php" files appeared and so on. Today it happened again. COntacted the host and they told me they did it thorugh the faq.php file.

Basically a comand can be like this: faq.php?cmd=ls%20-a

I tried it and it worked.

Tried this on another 3.8 forum and it didn't worked so I guess the settings are wrong somewhere. Any ideas what I did wrong?

Thanks