Hello Till, thnks for reply.
I have ISPConfig first step at first ISPConfig instalation. My server work 2-3 years. In ISPConfig Suexec is enable in Settings.
But how I can migrate to suphp and how ISPConfig works with suphp? If I install suphp, another website will work ok?
mini14: "the only damage he should be able to do is in his own account. "
As I know www-data user was hacked. I think hacker download php or cgi script on ftp, and after that hi have access to all /var/www catalog and if file have chmod 777 hi can modify this file. Server was installed this Perfect server install, it is means that if you have instation by this tutorial, hacker can do this at any server with with tutorial.
Last edited by Captain; 23rd December 2010 at 10:42.