Scripts of SPAM and phishing installed on my server!

[futurosoft]

Hello.

I are running an Plesk 11.5 on a Ubuntu 12.04 machine. Since days i have problems where i see scripts of phishing sites and mailer scripts installed in the httpdocs directory of various domain.

How I can prevent that people outsiders install this scripts on the server? Where is the bug that allows this?

Thanks.

 

[abdi]

Most likely those scripts are being added through a CMS like Wordpress or Joomla. (It's very common with those CMSs).
Quick work around is to disable the PHP Mail function. That will automatically kill all SPAM using that function!

 

[futurosoft]

But, ¿How someone can to put this code in server? I also have installed scripts of phising on various domains.

Ok that this are by CMS, but I have seen scripts installed on simples HTML websites.

How can i skip it?

Thanks.

 

[abdi]

http://forum.parallels.com/showthread.php?70207-How-to-Mod_security-on-plesk-servers

 

[HMoellendorf87]

You could also activate the log for sendmail and analyze it then.