Hi,
as I'm new to Drupal, I used Drupal Gardens in a first time and now I've imported my website directly to my server.
The problem I have is that for the second time in 2 weeks my copyright image in the bottom of my website site is "hacked"...
You can see it here : www.chab.info
Nothing else changed. Last week when I happened I changed my drupal admin and mysql password and I added restrictive rules in my firewall (iptables), however it happened again !
Now Drupal want to search the copyright image in a china server :
http://58.218.204.110/sites/default/files/styles/large/public/copyright_...
instead of
http://www.chab.info/sites/default/files/styles/large/public/copyright_0...
To correct it last time, I just edit the copyright block and validated it again with no change and it corrected the path.
I already have fail2ban and a good security level for apache (in my opinion), so I don't know what to do now ?
any idea, comment ?
It seems that this chinese server want to see if I have a proxy running (I don't). But why and HOW did it change my website content ???
Here are the apache's logs (errors) :
58.218.204.110 - - [13/Mar/2011:15:49:51 +0100] "GET http://98.126.15.13/proxyheader.php HTTP/1.1" 404 25195 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"