phpSiteMinder

This week we have released updates for phpSiteMinder and phpSiteScanner, and have updated the website too. Some people have reported they were having an issue with the ordering system on the website. Thanks for the messages, it should all be fixed now.

In my role as a web developer at a company I will not name, I received a call after hours from my employer. A Clients website (who shall also remain nameless) had been hacked.

A shopping center website was displaying links to adult services among others, and a defacement message.

After investigating the matter further, I discovered that the site had been hacked over 3 weeks ago, and only now had the client noticed. The hackers had also left a shell script so they could re-hack the site whenever they liked.

Had the client been using phpSiteMinder they would have been alerted via email to the existence of the shell script when phpSiteMinder performed its next automatic scan. Quite possibly they could have had the site cleaned up before any of their visitors noticed, instead of serving the hacked content for 3 weeks.

We've added a blog so we can keep you up-to-date with what's happening.

We've been pretty busy lately. There is a new product added to the line up called phpSiteScanner. You can read more about it here.

There is also a new release of phpSiteMinder which incorporates some of the ideas we came up with when developing phpSiteScanner and adopts the new reporting layout making it easier to spot files with alot of suspicious content.

There's also a download link now that lets you download all the files phpSiteMinder/phpSiteScanner thinks need further investigation. So you can download them to your PC and let your virus scanner have a look at them and see if it picks up any malicious content.

These new releases will be available later today.