Hi there, just wondering if anyone on here can offer me some pointers.
Our site, ukhh.com keeps getting targetted with a script injection. I have no idea how it's getting in but it gets included in the head tag on our html pages and phpbb3 php pages and generally screws it up. I'm running a php that is slightly out of date (php3.02) so not sure if there's any known vulnerability with that or if there will be something else in my site that will let people inject a script.
can anyone offer any pointers of what to look for or how to determine what they're doing to get in? it's happened a lot over the past couple of months and sometimes happens a couple of times a day
thanks in advance