Webmasters Stack Exchange is a question and answer site for pro webmasters. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've been facing the exact same injected script on several of my websites for the last few weeks. Today I realize these websites don't share the same hosting servers, yet the attacks (1) started at the same time (2) are identical.

Does this prove that my FTP passwords have been stolen (they're all stored in Filezilla XML file on my hard drive) ? What else could be the security hole?

share|improve this question
up vote 2 down vote accepted

It is likely to be either the FTP passwords or some common software that is powering the sites. For example it is very common for an old version of WordPress to be vulnerable to this type of an attack.

You should:

  • Change your FTP passwords
  • Update all the software powering your sites.

Google just released a set of resources for Webmasters that have been hacked. You may find more information there that is relevant to your situation.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.