1) I need a PHP and MYSQL EXPERT to fix security issues in the PHP script I use.
It's an old hit tracking script to receive and spread hits to traffic campaigns set up in the script.
A HACKER is entering as ADMIN and changing the URLS of the traffic campaigns to redirect the hits to other URLS... He has full admin power AT THE MOMENT!!
I tried the following without success:
- I change the admin username password.
- I changed the password of admin from another computer than my PC to see if the problem comes from my PC but the hacker came back. I didn't login form my PC to see if he was getting the password from my personal PC.
You must be available to start the work NOW or at least within 2 hours MAXIMUM.
I will send you the FTP login first so you will login to FTP and check the PHP files, maybe there is a specific file allowing the hacker to connect to DB through the script. This is an old script with some useless files in the FTP area. They may help the hacker, I don't know.
2) Also, the passwords in the DATABASE are NOT ENCRYPTED!! That's very bad. This tasks if OPTIONAL but if you can find a way to ENCRYPT all current passwords in DB FAST, it would be GREAT. I don't care if all passwords are RESET, he would have had hard time if the passwords were encrypted.
You must have PHP coder skills of course as a PHP expert to FIX the WEAK points of the script.
Please send a PM so I can send you the URL of the stat script experiencing the issue.
I use Yahoo messenger so we can start immediately.
Please your BIDS if you are ready to begin RIGHT AWAY!
ONLY SERIOUS AND EXTREMELY SKILLED BIDDERS ONLY! NO TIME WASTERS PLEASE!