Well, if it's the same asshat that has been hacking my site, it's through SQL injection. I also use HostMonster.
a 1111 setting is... well... no. Just don't do it.
At any rate, any known method to prevent this clown from hitting again? All 3 times, it's been through SQL injection, bypassing all security, as if it didn't even exist. It's not a member, and the access logs seem to indicate the guy is from Israel. Halp?
|