3 ms·
One day I got a similar call from an old customer I had not heard about for 6 months or so "Please help, my customer website has been hacked ! All content has b
by 1337shadow 7y ago
One day I got a similar call from an old customer I had not heard about for 6 months or so "Please help, my customer website has been hacked ! All content has been deleted !".
A simple grep delete on the Apache logs showed that a User-Agent called GoogleBot visited all delete pages.
Looking at these pages source codes, the developers that coded their website had forgotten to check authentication on a number of administration pages.
And of course, the list page showed links to delete each content item, that was intercepted by a javascript callback doing a confirm(), which didn't matter for GoogleBot.