Website got hacked many times.

[ahmed2012]

Hello!
I have Cpanel installed my VPS

About 6 websites are host in WHM and all are mine.

But my website got hacked many time. I have change root password many times but hacker still upload PHP file on website even website is empty there is no file in website but hacker can still upload PHP file.
Please Tell me how i secure.

 

[cPanelTristan]

Please check the domlogs for each domain at /usr/local/apache/domlogs/ location. If they are uploading files via a security hole, the access has to be showing up in the domain logs.

There's another discussion recently on the same topic also. In fact, quite a few discussions that could be read / searched. Here's that specific discussion:

http://forums.cpanel.net/f185/whm-got-hacked-even-i-changed-root-password-287712.html#post1202271

 

[ahmed2012]

Thank Sir
But i m noob in SSH. Please Tell me how to view log.

 

[cPanelTristan]

Hello,

In SSH, you'd open up the log file and search it for the times in question:

vi /usr/local/apache/domlogs/domain.com

Replace domain.com with the domain name. In vi, you can do a search using esc key + / and then entering the time. It will go forward in the file to that time.

If you aren't familiar with SSH, you are probably going to end up having to hire someone for this. It's extremely difficult to train every single command to use to investigate getting hacked in a forum thread.

Sys Admin Services | cPanel App Catalog

There's a list of companies who provide system administration and development services.

Otherwise, it's a long road ahead to learn Linux commands via Google guides. Here's one such guide:

Quickstart

Thanks!

 

[ahmed2012]

Hello,

In SSH, you'd open up the log file and search it for the times in question:

vi /usr/local/apache/domlogs/domain.com

Replace domain.com with the domain name. In vi, you can do a search using esc key + / and then entering the time. It will go forward in the file to that time.

If you aren't familiar with SSH, you are probably going to end up having to hire someone for this. It's extremely difficult to train every single command to use to investigate getting hacked in a forum thread.

Sys Admin Services | cPanel App Catalog

There's a list of companies who provide system administration and development services.

Otherwise, it's a long road ahead to learn Linux commands via Google guides. Here's one such guide:

Quickstart

Thanks!

Thank you SIR.