On Sun, 13 Jan 2008 21:22:20 -0500 Chris Mauritz <chrism at imntv.com> wrote: > Mark Weaver wrote: > > "The only other apps that were on the system at the time was a php > web site and forum." > > --- > > Heh. Yep, those PHP web forums have a squeaky clean track record. > > *rolling eyes* > yeah... and the one that was possibly part of the problem is now gone. I never restored it from backup after the second breach. The perps were trying after the second reload, but since that web site wasn't restored and running on the web server they weren't able to get in.