I've recently been employed as a junior web and software developer for a small company, and noticed that their Home page has had links to completely unrelated sites added like spam to the
index.html which have been hidden (
I wanted to know how this was preventable in future, or how it was even possible. I will be changing the FTP access login and password, and getting the host to change their admin passwords, but I also have a
PHP contact-us form in one of the pages which I feel may possibly be exploitable.
Do I need to get the host to change their PHP permissions, and if so, what to? Do I need to add anything to the PHP code that may help prevent this kind of thing? Are there any other security implications I need to know.
Browsing the web for these details has been rather unsuccessful. Thank you all in advanced for any help you can offer me.