# Hacking my server

**URL:** <https://discourse.cakephp.org/t/hacking-my-server/3581>\
**Category:** Uncategorized\
**Created:** [November 27, 2017, 12:25pm UTC](https://discourse.cakephp.org/t/hacking-my-server/3581 "2017-11-27T12:25:42Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![kentosama](https://avatars.discourse-cdn.com/v4/letter/k/bbce88/32.png) [@kentosama](https://discourse.cakephp.org/u/kentosama)\
**Post date:** [November 27, 2017, 12:25pm UTC](https://discourse.cakephp.org/t/hacking-my-server/3581/1 "2017-11-27T12:25:42Z")

</div>

Hello, it’s been months that I have problems with my server that has been hacked. I did not notice it at first, because I was convinced that I had a configuration problem. It is by falling on a malicious script inserted in the webroot folder that persuaded me. So I would like to know how is it possible to have this script when I have never shared my password or give access to my server.

Would it be a security hole in CakePHP 3?

---

<div class="post-metadata">

**Author:** ![deepvyas](https://avatars.discourse-cdn.com/v4/letter/d/e0b2c6/32.png) [@deepvyas](https://discourse.cakephp.org/u/deepvyas)\
**Post date:** [November 27, 2017, 1:12pm UTC](https://discourse.cakephp.org/t/hacking-my-server/3581/2 "2017-11-27T13:12:28Z")

</div>

Yes it might be an issue with Cross-site Scripting (XSS) left opened by your developer.  
Get it checked and sorted

---

<div class="post-metadata">

**Author:** ![rrd](https://yyz1.discourse-cdn.com/flex029/user_avatar/discourse.cakephp.org/rrd/32/113_2.png) [@rrd](https://discourse.cakephp.org/u/rrd)\
**Post date:** [November 27, 2017, 5:05pm UTC](https://discourse.cakephp.org/t/hacking-my-server/3581/3 "2017-11-27T17:05:35Z")

</div>

It can be many things. If it is a shared hosting and your folder permissions allow your group or anybody write to that folder than it is a possible reason. If you have file upload in your application it may be vulnerable.  
On the other way if you save your password to FileZilla / Total Commander than a malware can hijack it.