Personal website hacked at ovh.com, code added to html

Question

My friend has a website at ovh.com. After a couple of days, the site is marked as dangerous by Google.

I looked through the files (the site contains only html, css, pjg), and it seems like a new line of code:

<script>http://...page.php</script></body>

(I don’t remember the exact url) has been added to some html pages. This is obviously a virus that will run when the page is displayed.

If I delete this line and scan the file again, it will be fine.

How can this be added to a file on the server? Is there anything that can be done to prevent such things? (thinking of things .htaccess or something else). I don’t see how ftp ids could have been stolen, so for me this code insertion should come from somewhere else.

Could you help me?

Many thanks,

Luke

Answer 1

, , . ... - . , , - , Joomla, phpBB, Wordpress . , .

. "" , . , - PHPBB, . , "" . , , . , : Joomla script gibberish- javascript, , , Chrome. phpMyAdmin , .

, ? -, , ... db ftp. -, , ... , . , , (- , WiFi)? - .... , . , GREP .... , , . 2 . , , . , , , , , .

, , , - . , . , .

Answer 2

• ? , .
• ?
• .htaccess