Groups > comp.lang.javascript > #20382 > unrolled thread

How to detect that or determine if your server side script or javascript has been hacked?

Started by	justaguy <lichunshen84@gmail.com>
First post	2013-06-21 15:01 -0700
Last post	2013-06-22 01:34 -0400
Articles	16 — 8 participants

Back to article view | Back to comp.lang.javascript

#20382 — How to detect that or determine if your server side script or javascript has been hacked?

From	justaguy <lichunshen84@gmail.com>
Date	2013-06-21 15:01 -0700
Subject	How to detect that or determine if your server side script or javascript has been hacked?
Message-ID	<e5abd2fe-dd94-4d84-8bad-277d87c242a9@googlegroups.com>

Mysterious things have happened several times.  For instance, I have a form that have a dozen or so elements, each element has an id and a name, and this form has been working for a while... then I go back to add more javascript functionality, but all of a sudden, I find my new code fails without a good reason.  And then after some hair-scratch, I noticed that the respective ID for these TWO elements has been removed.  It's impossible for me to remove them myself.  What does this suggest?  

A) My computer has been hacked. Some evil criminal is monitoring everything I do and constantly creating problems for me.  And it's associated with some powerful organization...
B) My computer has been hacked. Some nasty individual with superb hacking skills is just doing it for the heck of it, indeed nasty and evil.  One individual on this NG fits this profile well.

No anti-virus type of software would be of any use if the above A) is true (their endless resources means they got the very very best of everything).
So, the question is, how to keep away from the above B) case?

And if the above A) is true what a fucking world we live now!!! (If you want name and evidence and if you know some god-damn honest and brave journalist contact me).

[toc] | [next] | [standalone]

#20383

From	"Evertjan." <exxjxw.hannivoort@inter.nl.net>
Date	2013-06-22 00:56 +0200
Message-ID	<XnsA1E79A10E952eejj99@194.109.133.133>
In reply to	#20382

justaguy wrote on 22 jun 2013 in comp.lang.javascript:

> Mysterious things have happened several times.

It is all in your mind, justaguy.

You just are not the programming expert you think you are.
That is not so bad, because neither are we.
The difference is that though experience we know it, and you don't yet.

=================================

> Re: How to detect that or determine if your server side script or 
> javascript has been hacked?

Illogical question, javascript does not mean clientside,
as serverside javascript is quite a legitimate possibility.

If you were hacked by your endless resources expert, chances are you would 
never know. Hacking by them is done for a reason, just annoying you 
definitely has its merits, but is not enough reason.

> And if the above [..] is true what a fucking world we live now!!!

Yes, fairies are out of season nowadays in programming cyberspace.

Finding out you are not that programming expert YTYA could feel lika a 
cold shower, but the realisation will be benificial, as you start seeing 
the necessity of debugging your code, instead of complaining about the 
world and asking others to do such debugging for you.

-- 
Evertjan.
The Netherlands.
(Please change the x'es to dots in my emailaddress)

[toc] | [prev] | [next] | [standalone]

#20386

From	justaguy <lichunshen84@gmail.com>
Date	2013-06-21 21:19 -0700
Message-ID	<fa737844-ec4d-4581-9c32-82e366b4eb96@googlegroups.com>
In reply to	#20383

On Friday, June 21, 2013 6:56:47 PM UTC-4, Evertjan. wrote:
> justaguy wrote on 22 jun 2013 in comp.lang.javascript:
> 
> 
> 
> > Mysterious things have happened several times.
> 
> 
> 
> It is all in your mind, justaguy.
> 
> 
> 
> You just are not the programming expert you think you are.
> 
> That is not so bad, because neither are we.
> 
> The difference is that though experience we know it, and you don't yet.
> 
> 
> 
> =================================
> 
> 
> 
> > Re: How to detect that or determine if your server side script or 
> 
> > javascript has been hacked?
> 
> 
> 
> Illogical question, javascript does not mean clientside,
> 
> as serverside javascript is quite a legitimate possibility.
> 
> 
> 
> If you were hacked by your endless resources expert, chances are you would 
> 
> never know. Hacking by them is done for a reason, just annoying you 
> 
> definitely has its merits, but is not enough reason.
> 
> 
> 
> > And if the above [..] is true what a fucking world we live now!!!
> 
> 
> 
> Yes, fairies are out of season nowadays in programming cyberspace.
> 
> 
> 
> Finding out you are not that programming expert YTYA could feel lika a 
> 
> cold shower, but the realisation will be benificial, as you start seeing 
> 
> the necessity of debugging your code, instead of complaining about the 
> 
> world and asking others to do such debugging for you.
> 
> 

You're a good guy and has been very helpful... let's forget about the two scenario speculation for a sec.  In the last few months some of my HTML FORM element returns double value... for instance,
<form>
<input type="text" id="quantity" name="quantity" size="3">
</form>

And say, the user enter 1 for the input box.  But when the form is submitted,
the value of FORM.quantity is strangely "1,1" instead of "1".
I can't fathom that I change the value of this FORM element upon submission.
So, how come?  It has happened several times.

Thanks.

[toc] | [prev] | [next] | [standalone]

#20390

From	"Evertjan." <exxjxw.hannivoort@inter.nl.net>
Date	2013-06-22 09:23 +0200
Message-ID	<XnsA1E75F9003A4eejj99@194.109.133.133>
In reply to	#20386

justaguy wrote on 22 jun 2013 in comp.lang.javascript:

> You're a good guy and has been very helpful... let's forget about the
> two scenario speculation for a sec.  In the last few months some of my
> HTML FORM element returns double value... for instance, <form>
> <input type="text" id="quantity" name="quantity" size="3">
> </form>

Why include all this nonpertinent html-code: id="quantity" & size="3"?

> 
> And say, the user enter 1 for the input box.  But when the form is
> submitted, the value of FORM.quantity is strangely "1,1" instead of
> "1". I can't fathom that I change the value of this FORM element upon
> submission. So, how come?  It has happened several times.

I doubt if you are telling me the whole story, because:

1 if that is what it is, it has nothing to do with Javascript, so is off 
topic here.

2 perhaps the error is in the detection code, which you do not show. I 
would prefere serverside value detection here.

3 if your OS-settings are U.S., "1,1" perhaps, depending on the detection 
code, is a collection of 2 values, and does not mean 1 1/10.

4 if additional code were introduced by a hacker, you should be able to 
detect that by debugging.

Try to show your error here, using serverside javascript to stay on topic:

============ test.asp ==========

<%@ language="javascript" %>
<!DOCTYPE html>
Response: <% Response.write(Request.querystring); %>
<form>
<input name="quantity" >
</form>

=========== tested =============


-- 
Evertjan.
The Netherlands.
(Please change the x'es to dots in my emailaddress)

[toc] | [prev] | [next] | [standalone]

#20393

From	justaguy <lichunshen84@gmail.com>
Date	2013-06-22 07:26 -0700
Message-ID	<39936294-c6ab-4553-b58d-e4401393f89b@googlegroups.com>
In reply to	#20390

On Saturday, June 22, 2013 3:23:38 AM UTC-4, Evertjan. wrote:
> justaguy wrote on 22 jun 2013 in comp.lang.javascript:
> 
> 
> 
> > You're a good guy and has been very helpful... let's forget about the
> 
> > two scenario speculation for a sec.  In the last few months some of my
> 
> > HTML FORM element returns double value... for instance, <form>
> 
> > <input type="text" id="quantity" name="quantity" size="3">
> 
> > </form>
> 
> 
> 
> Why include all this nonpertinent html-code: id="quantity" & size="3"?
> 
Because I need javascripting for some of these elements and using ID is easier to reference an element.

> > 
> 
> > And say, the user enter 1 for the input box.  But when the form is
> 
> > submitted, the value of FORM.quantity is strangely "1,1" instead of
> 
> > "1". I can't fathom that I change the value of this FORM element upon
> 
> > submission. So, how come?  It has happened several times.
> 
> 
> 
> I doubt if you are telling me the whole story, because:
> 
> 
> 
> 1 if that is what it is, it has nothing to do with Javascript, so is off 
> 
> topic here.
> 
> 
> 
> 2 perhaps the error is in the detection code, which you do not show. I 
> 
> would prefere serverside value detection here.
> 
> 
> 
> 3 if your OS-settings are U.S., "1,1" perhaps, depending on the detection 
> 
> code, is a collection of 2 values, and does not mean 1 1/10.
"a collection of 2 values", correct.
 
> 
> 
> 4 if additional code were introduced by a hacker, you should be able to 
> 
> detect that by debugging.
I did by dumping all the submitted-FORM elements and respective values.

So, it looks possible that I may accidentally create duplicate IDs and Names for a FORM then the problematic double value for a FORM element?  I'm creating a debugging function to test this.

<FORM id="myformID" onSubmit="debugg();">
...
<span id="deb"></span>
</FORM>

function debugg() {
		var elements = document.getElementById("myformID").elements;
		 for (i=0; i<elements.length; i++) {
			document.getElementById('deb').innerHTML = document.getElementById('deb').innerHTML + ' + elements[i] + ' + ':' + '+ elements[i].value + ';
		}
	
		return false;
	}

I thought upon FORM submission it would execute the debugg function and stop, not proceed of actual submission because of return false statement.  But no, it submits the FORM.  What am I missing?

Thanks.

 

> 
> 
> Try to show your error here, using serverside javascript to stay on topic:
> 
> 
> 
> ============ test.asp ==========
> 
> 
> 
> <%@ language="javascript" %>
> 
> <!DOCTYPE html>
> 
> Response: <% Response.write(Request.querystring); %>
> 
> <form>
> 
> <input name="quantity" >
> 
> </form>
> 
> 
> 
> =========== tested =============
> 
> 
> 
> 
> 
> -- 
> 
> Evertjan.
> 
> The Netherlands.
> 
> (Please change the x'es to dots in my emailaddress)

[toc] | [prev] | [next] | [standalone]

#20395

From	justaguy <lichunshen84@gmail.com>
Date	2013-06-22 08:17 -0700
Message-ID	<0617bc05-2604-4c2a-bb95-32910a9c9c45@googlegroups.com>
In reply to	#20393

On Saturday, June 22, 2013 10:26:43 AM UTC-4, justaguy wrote:
> On Saturday, June 22, 2013 3:23:38 AM UTC-4, Evertjan. wrote:
> 
> > justaguy wrote on 22 jun 2013 in comp.lang.javascript:
> 
> > 
> 
> > 
> 
> > 
> 
> > > You're a good guy and has been very helpful... let's forget about the
> 
> > 
> 
> > > two scenario speculation for a sec.  In the last few months some of my
> 
> > 
> 
> > > HTML FORM element returns double value... for instance, <form>
> 
> > 
> 
> > > <input type="text" id="quantity" name="quantity" size="3">
> 
> > 
> 
> > > </form>
> 
> > 
> 
> > 
> 
> > 
> 
> > Why include all this nonpertinent html-code: id="quantity" & size="3"?
> 
> > 
> 
> Because I need javascripting for some of these elements and using ID is easier to reference an element.
> 
> 
> 
> > > 
> 
> > 
> 
> > > And say, the user enter 1 for the input box.  But when the form is
> 
> > 
> 
> > > submitted, the value of FORM.quantity is strangely "1,1" instead of
> 
> > 
> 
> > > "1". I can't fathom that I change the value of this FORM element upon
> 
> > 
> 
> > > submission. So, how come?  It has happened several times.
> 
> > 
> 
> > 
> 
> > 
> 
> > I doubt if you are telling me the whole story, because:
> 
> > 
> 
> > 
> 
> > 
> 
> > 1 if that is what it is, it has nothing to do with Javascript, so is off 
> 
> > 
> 
> > topic here.
> 
> > 
> 
> > 
> 
> > 
> 
> > 2 perhaps the error is in the detection code, which you do not show. I 
> 
> > 
> 
> > would prefere serverside value detection here.
> 
> > 
> 
> > 
> 
> > 
> 
> > 3 if your OS-settings are U.S., "1,1" perhaps, depending on the detection 
> 
> > 
> 
> > code, is a collection of 2 values, and does not mean 1 1/10.
> 
> "a collection of 2 values", correct.
> 
>  
> 
> > 
> 
> > 
> 
> > 4 if additional code were introduced by a hacker, you should be able to 
> 
> > 
> 
> > detect that by debugging.
> 
> I did by dumping all the submitted-FORM elements and respective values.
> 
> 
> 
> So, it looks possible that I may accidentally create duplicate IDs and Names for a FORM then the problematic double value for a FORM element?  I'm creating a debugging function to test this.
> 
> 
> 
> <FORM id="myformID" onSubmit="debugg();">
> 
> ...
> 
> <span id="deb"></span>
> 
> </FORM>
> 
> 
> 
> function debugg() {
> 
> 		var elements = document.getElementById("myformID").elements;
> 
> 		 for (i=0; i<elements.length; i++) {
> 
> 			document.getElementById('deb').innerHTML = document.getElementById('deb').innerHTML + ' + elements[i] + ' + ':' + '+ elements[i].value + ';
> 
> 		}
> 
> 	
> 
> 		return false;
> 
> 	}
> 

I made some syntax error in the above debugg function code.

Here's the updated one,
[A]
for (i=0; i<elements.length; i++) {
document.getElementById('deb').innerHTML = document.getElementById('deb').innerHTML + '<br/>'  + document.getElementById(elements[i]) +  ':' +  elements[i].value;
		}
or
[B]
for (i=0; i<elements.length; i++) {
document.getElementById('deb').innerHTML = document.getElementById('deb').innerHTML + '<br/>'  + elements[i] +  ':' +  elements[i].value;
		}
However, 
neither document.getElementById(elements[i]) nor elements[i]
returns element id or name.
For the former it returns null and for the latter 
it returns [object HTMLInputElement]
what's the correct syntax here?

Thanks.

[toc] | [prev] | [next] | [standalone]

#20391

From	Denis McMahon <denismfmcmahon@gmail.com>
Date	2013-06-22 13:12 +0000
Message-ID	<kq47s3$jor$1@dont-email.me>
In reply to	#20386

On Fri, 21 Jun 2013 21:19:01 -0700, justaguy wrote:

> You're a good guy and has been very helpful... let's forget about the
> two scenario speculation for a sec.  In the last few months some of my
> HTML FORM element returns double value... for instance,
> <form>
> <input type="text" id="quantity" name="quantity" size="3">
> </form>
> 
> And say, the user enter 1 for the input box.  But when the form is
> submitted,
> the value of FORM.quantity is strangely "1,1" instead of "1".
> I can't fathom that I change the value of this FORM element upon
> submission.
> So, how come?  It has happened several times.

First things first. Is your HTML validating?

Remember that Javascript acts on the document node tree that the browser 
generates from your html by using the dtd that you specify. If your html 
isn't valid for that dtd, then the browser may be applying your javascript 
to a document node tree that doesn't match the one you wrote the 
javascript to work on.

Oh, and check whether you have multiple inputs in the form with the same 
name or id values too.

-- 
Denis McMahon, denismfmcmahon@gmail.com

[toc] | [prev] | [next] | [standalone]

#20392

From	Tim Streater <timstreater@greenbee.net>
Date	2013-06-22 15:24 +0100
Message-ID	<timstreater-A5603B.15244722062013@news.individual.net>
In reply to	#20391

In article <kq47s3$jor$1@dont-email.me>,
 Denis McMahon <denismfmcmahon@gmail.com> wrote:

> On Fri, 21 Jun 2013 21:19:01 -0700, justaguy wrote:
> 
> > You're a good guy and has been very helpful... let's forget about the
> > two scenario speculation for a sec.  In the last few months some of my
> > HTML FORM element returns double value... for instance,
> > <form>
> > <input type="text" id="quantity" name="quantity" size="3">
> > </form>
> > 
> > And say, the user enter 1 for the input box.  But when the form is
> > submitted,
> > the value of FORM.quantity is strangely "1,1" instead of "1".
> > I can't fathom that I change the value of this FORM element upon
> > submission.
> > So, how come?  It has happened several times.
> 
> First things first. Is your HTML validating?
> 
> Remember that Javascript acts on the document node tree that the browser 
> generates from your html by using the dtd that you specify. If your html 
> isn't valid for that dtd, then the browser may be applying your javascript 
> to a document node tree that doesn't match the one you wrote the 
> javascript to work on.

Do browsers do that, read the dtd? I thought they only cared whether 
there was a doctype or not, and ignored its contents.

-- 
Tim

"That excessive bail ought not to be required, nor excessive fines imposed,
nor cruel and unusual punishments inflicted"  --  Bill of Rights 1689

[toc] | [prev] | [next] | [standalone]

#20396

From	Thomas 'PointedEars' Lahn <PointedEars@web.de>
Date	2013-06-22 18:13 +0200
Message-ID	<2505650.gy7AA5UhkT@PointedEars.de>
In reply to	#20392

Tim Streater wrote:

> Denis McMahon <denismfmcmahon@gmail.com> wrote:
>> […] Is your HTML validating?
>> 
>> Remember that Javascript acts on the document node tree that the browser
>> generates from your html by using the dtd that you specify. If your html
>> isn't valid for that dtd, then the browser may be applying your
>> javascript to a document node tree that doesn't match the one you wrote
>> the javascript to work on.
> 
> Do browsers do that, read the dtd?

It depends on the markup language, the used parser, and the parsing mode.  

For (X)HTML5 there is no (formal) Document Type Definition (DTD), but there 
are standardized parsing rules. [1]  If an author ignores those rules, the 
result is probably not what they wanted.

For HTML 4 there are DTDs [2], but few parsers work strictly according to 
those.  However, I remember vividly from several years ago a stylesheet rule 
“working” in Internet Explorer (when it should not have worked) and “not 
working” (when it should have worked) in Firefox.  The reason was that the 
resulting document tree was different in Internet Explorer than in Firefox 
because of different error correction of invalid markup, and then in IE CSS 
rules were applied that never were intended to apply.  The corresponding 
developer tools showed me.  This taught me two things if I not already knew 
them at that point:

  1. Never blindly trust source code.  Not your own, and especially not
     foreign code.

  2. Always validate your markup and stylesheets before complaining.

For XHTML 1.x, 2.0, and other XML applications there are DTDs, and not 
following the DTD may result in a syntax error so that the document is not 
further processed at all. [3]  This is particularly true for parsing XHTML 
when served with an XHTML media type that is _not_ “text/html” [1], and for 
SVG and MathML.

> I thought they only cared whether there was a doctype or not, and ignored
> its contents.

No, there are *at least* parsing rules that are *based on* the respective 
language Specification in order to make the best sense of even formally 
erroneous markup.  Ignoring that Specification is risky, as error correction 
is not (fully) standardized and certainly not interoperable.  This is why 
there are validators, e.g. [4] and [5]. [6]

Also, there is the “DOCTYPE switch” feature that determines the *rendering* 
mode depending on the content of the (pseudo-)DOCTYPE declaration. [7]

For client-side DOM scripting, it also affects which properties are 
available where (document.documentElement.* vs. document.body.*) and what 
values will be functional (e.g., non-zero lengths with vs. without unit on 
style properties).

________ 
[1] <http://www.w3.org/TR/2012/CR-html5-20121217/syntax.html#parsing>
[2] <http://www.w3.org/TR/1999/REC-html401-19991224/sgml/intro.html>
[3] <http://www.w3.org/TR/2008/REC-xml-20081126/#proc-types>
[4] <http://validator.w3.org/>
[5] <http://jigsaw.w3.org/css-validator/>
[6] 
<http://wayback.archive.org/web/20110925033612/http://diveintomark.org/archives/2003/05/05/why_we_wont_help_you>
[7] <http://www.quirksmode.org/css/quirksmode.html>
-- 
PointedEars

Twitter: @PointedEars2
Please do not Cc: me. / Bitte keine Kopien per E-Mail.

[toc] | [prev] | [next] | [standalone]

#20397

From	Thomas 'PointedEars' Lahn <PointedEars@web.de>
Date	2013-06-22 18:33 +0200
Message-ID	<3650301.rXO7mWPVdn@PointedEars.de>
In reply to	#20396

Thomas 'PointedEars' Lahn wrote:

> For XHTML 1.x, 2.0, and other XML applications there are DTDs, and not
> following the DTD may result in a syntax error so that the document is not
> further processed at all. [3]  This is particularly true for parsing XHTML
> when served with an XHTML media type that is _not_ “text/html” [1], and
                                                                 ^^^
> for SVG and MathML.

Make that

[1a] <http://www.w3.org/TR/xhtml-media-types/>
 
-- 
PointedEars

Twitter: @PointedEars2
Please do not Cc: me. / Bitte keine Kopien per E-Mail.

[toc] | [prev] | [next] | [standalone]

#20394

From	justaguy <lichunshen84@gmail.com>
Date	2013-06-22 07:27 -0700
Message-ID	<bf0fa251-845c-44ea-94a5-0390bdb15518@googlegroups.com>
In reply to	#20391

On Saturday, June 22, 2013 9:12:35 AM UTC-4, Denis McMahon wrote:
> On Fri, 21 Jun 2013 21:19:01 -0700, justaguy wrote:
> 
> 
> 
> > You're a good guy and has been very helpful... let's forget about the
> 
> > two scenario speculation for a sec.  In the last few months some of my
> 
> > HTML FORM element returns double value... for instance,
> 
> > <form>
> 
> > <input type="text" id="quantity" name="quantity" size="3">
> 
> > </form>
> 
> > 
> 
> > And say, the user enter 1 for the input box.  But when the form is
> 
> > submitted,
> 
> > the value of FORM.quantity is strangely "1,1" instead of "1".
> 
> > I can't fathom that I change the value of this FORM element upon
> 
> > submission.
> 
> > So, how come?  It has happened several times.
> 
> 
> 
> First things first. Is your HTML validating?
> 
> 
> 
> Remember that Javascript acts on the document node tree that the browser 
> 
> generates from your html by using the dtd that you specify. If your html 
> 
> isn't valid for that dtd, then the browser may be applying your javascript 
> 
> to a document node tree that doesn't match the one you wrote the 
> 
> javascript to work on.
> 
> 
> 
> Oh, and check whether you have multiple inputs in the form with the same 
> 
> name or id values too.
> 

"check whether you have multiple inputs in the form with the same 
name or id values too. ", good thought, thanks.

[toc] | [prev] | [next] | [standalone]

#20384

From	Joao Rodrigues <groups_jr-1@yahoo.com.br>
Date	2013-06-21 23:20 -0300
Message-ID	<kq31lc$h0r$1@speranza.aioe.org>
In reply to	#20382

On 21/06/2013 19:01, justaguy wrote:
>
> Mysterious things have happened several times.  For instance, I have
> a form that have a dozen or so elements, each element has an id and a
> name, and this form has been working for a while... then I go back to
> add more javascript functionality, but all of a sudden, I find my new
> code fails without a good reason.  And then after some hair-scratch,
> I noticed that the respective ID for these TWO elements has been
> removed.  It's impossible for me to remove them myself.  What does
> this suggest?

Are you using any server-side script such as PHP, ASP, etc? May the 
problem resides in the server-side.


> A) My computer has been hacked. Some evil criminal is monitoring
> everything I do and constantly creating problems for me.  And it's
> associated with some powerful organization... B) My computer has been
> hacked. Some nasty individual with superb hacking skills is just
> doing it for the heck of it, indeed nasty and evil.  One individual
> on this NG fits this profile well.
>
> No anti-virus type of software would be of any use if the above A) is
> true (their endless resources means they got the very very best of
> everything). So, the question is, how to keep away from the above B)
> case?
>
> And if the above A) is true what a fucking world we live now!!! (If
> you want name and evidence and if you know some god-damn honest and
> brave journalist contact me).
>

Have a look at this:
<http://codex.wordpress.org/FAQ_My_site_was_hacked>


-- 
Joao Rodrigues

[toc] | [prev] | [next] | [standalone]

#20387

From	justaguy <lichunshen84@gmail.com>
Date	2013-06-21 21:20 -0700
Message-ID	<094ad57f-7c68-4fcf-ae73-2972c3e7d2ca@googlegroups.com>
In reply to	#20384

On Friday, June 21, 2013 10:20:29 PM UTC-4, J.R. wrote:
> On 21/06/2013 19:01, justaguy wrote:
> 
> >
> 
> > Mysterious things have happened several times.  For instance, I have
> 
> > a form that have a dozen or so elements, each element has an id and a
> 
> > name, and this form has been working for a while... then I go back to
> 
> > add more javascript functionality, but all of a sudden, I find my new
> 
> > code fails without a good reason.  And then after some hair-scratch,
> 
> > I noticed that the respective ID for these TWO elements has been
> 
> > removed.  It's impossible for me to remove them myself.  What does
> 
> > this suggest?
> 
> 
> 
> Are you using any server-side script such as PHP, ASP, etc? May the 
> 
> problem resides in the server-side.
> 

Yes, JR.

> 
> 
> > A) My computer has been hacked. Some evil criminal is monitoring
> 
> > everything I do and constantly creating problems for me.  And it's
> 
> > associated with some powerful organization... B) My computer has been
> 
> > hacked. Some nasty individual with superb hacking skills is just
> 
> > doing it for the heck of it, indeed nasty and evil.  One individual
> 
> > on this NG fits this profile well.
> 
> >
> 
> > No anti-virus type of software would be of any use if the above A) is
> 
> > true (their endless resources means they got the very very best of
> 
> > everything). So, the question is, how to keep away from the above B)
> 
> > case?
> 
> >
> 
> > And if the above A) is true what a fucking world we live now!!! (If
> 
> > you want name and evidence and if you know some god-damn honest and
> 
> > brave journalist contact me).
> 
> >
> 
> 
> 
> Have a look at this:
> 
> <http://codex.wordpress.org/FAQ_My_site_was_hacked>
> 

No, no, I'm talking about web application functions, not some WP website...

[toc] | [prev] | [next] | [standalone]

#20385

From	Stefan Weiss <krewecherl@gmail.com>
Date	2013-06-22 04:34 +0200
Message-ID	<kq32gh$hur$1@news.albasani.net>
In reply to	#20382

On 2013-06-22 00:01, justaguy wrote:
> B) My computer has been hacked. Some nasty individual with superb
> hacking skills is just doing it for the heck of it, indeed nasty and
> evil. One individual on this NG fits this profile well.

Yeah, sorry about that...
But I swear I only removed ONE of the IDs - somebody else from this
group must have hacked you later and removed the other one.

- stefan

[toc] | [prev] | [next] | [standalone]

#20388

From	justaguy <lichunshen84@gmail.com>
Date	2013-06-21 21:21 -0700
Message-ID	<1fe74719-0289-4394-a114-2076201821d7@googlegroups.com>
In reply to	#20385

On Friday, June 21, 2013 10:34:56 PM UTC-4, Stefan Weiss wrote:
> On 2013-06-22 00:01, justaguy wrote:
> 
> > B) My computer has been hacked. Some nasty individual with superb
> 
> > hacking skills is just doing it for the heck of it, indeed nasty and
> 
> > evil. One individual on this NG fits this profile well.
> 
> 
> 
> Yeah, sorry about that...
> 
> But I swear I only removed ONE of the IDs - somebody else from this
> 
> group must have hacked you later and removed the other one.
> 
> 
> 
> - stefan

I know you're a good guy, you've been very helpful... much appreciated...

[toc] | [prev] | [next] | [standalone]

#20389

From	Mike Duffy <Use.web.form@in.sig>
Date	2013-06-22 01:34 -0400
Message-ID	<1ipdnca8tz1tl.1f5i2hw0gscbq.dlg@40tude.net>
In reply to	#20382

On Fri, 21 Jun 2013 15:01:22 -0700 (PDT), justaguy wrote:

> ... For instance, I have a form that have a dozen or so elements, EACH
> element has an id and a name, and this form has been working for a while
> ... then I go back to add more javascript functionality, but all of a sudden,
> I find my new code fails without a good reason.

As my pages get more complicated, this happens very often, almost every
time. Yes, I know it is truly mind-boggling to imagine that my original
code was poorly designed or that I didn't really understand what I was
doing when I "added functionality". But my only other explanation is
that I am losing my marbles. I choose the "lesser of two evils".

> .... My computer has been hacked. 

If you don't perform backups, start.

If you keep backups, verify the current web-site contents with your
backups.

If they are the same, your assertion above is in error.

If they are different, it is not a javascript problem.

-- 
http://pages.videotron.com/duffym/index.htm

[toc] | [prev] | [standalone]

csiph-web

How to detect that or determine if your server side script or javascript has been hacked?

Contents

#20382 — How to detect that or determine if your server side script or javascript has been hacked?

#20383

#20386

#20390

#20393

#20395

#20391

#20392

#20396

#20397

#20394

#20384

#20387

#20385

#20388

#20389