Webmasters Stack Exchange is a question and answer site for pro webmasters. It only takes a minute to sign up.
Sign up to join this community
My website is being redirected to a non-existent page (/showpage.php) for some users when they hit the homepage. For other users, the site works fine. I have looked in the index.php files and some other commonly used files. I believe strongly that this is a hack but I don't know how to get rid of it.
Any advice on where to start looking? Any experience dealing with something like this? I would greatly appreciate even the slightest thought on the matter.
Check your htaccess file as that is commonly where redirect hacks are placed. If you can't find it anywhere ask your host to check the Apache conf files as they may be the ones who are comprimised.
Searching on the associated filename in online exploit databases can sometimes yield insights/hints. For example, this exploit can affect the noted PHP webapp script (Warning: do not click on the demo there for the XSS exploit).
As indicated in that, this involves two types of common exploits:
There are many virus and web security scanner applications that utilize exploit databases, which can run on and monitor your server. An outdated list of some of them can be found here - search for others in Google.
