I'd been lucky for a while, but yesterday one of the web sites I support was hacked. I use a hosting service for that web, and I thought I had all security bases covered but somehow a hacker placed a 'default.htm' into the root of my web site - since I
was using Default.aspx their page was used. I suppose I was very lucky that that was the extent of the damage.
I immediately changed the FTP password and all passwords in my web.config, then I notified the web hosting service and they said it had to be corruption on my development machine (but I pointed out that the hack happened while my development machine was
powered off - there's only one of them).
I know there is a lot to look out for; I use the 'membership provider', I've turned off anonymous access, every page has 'on load' code that redirects to the logon page if the visitor is not logged in, etc.) I obviously missed something. What is the best
way t ...
Go to the complete details ...