Adsense Script » form http://scriptahead.com Fri, 10 Feb 2012 17:01:25 +0000 en hourly 1 http://wordpress.org/?v=3.0.1 CAN A HACKER HIJACK A WEBSITE VIA INJECTING A MALICIOUS SCRIPT INTO A PHP CONTACT FORM? http://scriptahead.com/364/can-a-hacker-hijack-a-website-via-injecting-a-malicious-script-into-a-php-contact-form/ http://scriptahead.com/364/can-a-hacker-hijack-a-website-via-injecting-a-malicious-script-into-a-php-contact-form/#comments Thu, 08 Dec 2011 05:01:18 +0000 admin http://scriptahead.com/364/can-a-hacker-hijack-a-website-via-injecting-a-malicious-script-into-a-php-contact-form/ Question by CharlieN:
Can a hacker hijack a website via injecting a malicious script into a php contact form?
My website was hijacked and I dont know how – it does have a php contact form but it doesn’t hook up to a database so no sql!


——————————————

Answer by Ayame Yamamoto
Short answer, yes. You using wordpress? I known XSS javascript injection is known and usually ends up on people who do not update wordpress. But the same would apply to the form if your not checking for such scripting.

——————————————
What do you think? Answer below!

]]> http://scriptahead.com/364/can-a-hacker-hijack-a-website-via-injecting-a-malicious-script-into-a-php-contact-form/feed/ 5