Security Question – Folder 755

It may be me, but it may not.

I have been getting backdoor hacks into /wp-content/plugins/s2member-files — with a folder directory permissions of 705 (using GoDaddy). I have updated it to 755 – but the hacker was inserting a .htaccess file – and there was no index.php file in the folder.

I’m not sure what the folder is for but the site still works despite my locking down the folder with htacess and it has stopped the injections.

These were fresh installs with new DB passwords and new login passwords/accounts.

I narrowed it down by last folder/file access and by using BPS Security and WSD Security.

Like I said, the hole appeared to be in S2 from what I can determine.

Thanks
Tim

Hello Tim,

So if I understood correctly, you’re saying that it’s possible a hacker was able to access your website through s2Member?

And the hacker keeps changing the permissions of your folders?

– Eduan