How was it "hacked"? That will help determine what kind of exploit might have been used. On 4/11/08, Al <news@xxxxxxxxxxxxx> wrote: > One of my sites has been hacked and I'm trying to find the hole. The hack > code creates dirs with "nobody" ownership, so it's obvious stuff is not via > ftp [ownership would be foo] -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php