|
|
Check the timestamp on the actual template in question. Odds are you have a
hole in your web server's security somewhere and someone's been able to drop a
script in somewhere and can alter any of your templates at will. Depending on
your OS and web server, there could be any number of ways for someone to get
it.
We've had it happen where through an older version of OpenSSH, someone was
able to get onto the server and update all of the Linux command files with
versions that also ran a keylogger, so anything we did on the command line was
recorded and sent to some other server. We've also had instrusions through
poorly created PHP applications (phpBB anyone?) that allowed anyone to drop
code into any file they chose.
|
|