As a webdesigner/webmaster I'm taking care of various websites. Recently one client's website got "hacked". It turned out that at their office one computer got infected by a trojan, that spied the ftp password and then 'they' somehow installed an invisible iframe that was loading some nasty piece of code.
It wasn't my fault - but I anyways wish I would have discovered the attack first.
So I looked for tools that would detect changes to the files and templates and came along this promissing little script called "websitecds" which stands for "website change detection system". It basically goes through the entire web folder and detects any changes to code made. It then sends you an email alert if the codebase has changed.
So far so good. I installed the script and got it running - and manually it works just great. But that's the problem: I don't want to run it manually - I need to have cron triggered cds. The good news is some people altered the script so that you could run it by cron, others added a functionality that lets you exclude certain folders (e.g. password protected folders).
Now finally here comes my problem/ my question: I never got a version running that would
- let you monitor a large number of websites, ideally from one central interface
- AND send an email alert if a change occurs, ideally listing the changes
- AND run by cron
- AND let you exclude password protected folders.
Have you? Or has anybody any hints or pointers to a similar piece of software?
update: What I find tempting about a rather simple "file a change detection solution" is that it would also inform me if a client uploaded a new file to his/her website...
PS: or would you rather suggest to ask this over at www.stackoverflow.com ?
PS2: Here's the project page to the script mentioned above: How to detect if your webserver is hacked and get alerted