yep, php file showing everything.... I should have known better (given my security management + risk assessment background) but it was a tiny site for a friend (my local kendo club) the area was htaccess protected but i guess they harvested a session or the dude wrote it down or something?

__________________
Web Development Cork | Music News | Irish Kendo | Cork Martial Arts

Regular backups will save us all!

__________________
Irish Gaming Network | Stolen Car Listings

backups will only give you back your data though ... not protect your end users data (and presumably you'd still have lost a number of hours new data ... but then it'd all depend on the site).

__________________
Forbairt Media | Web Design & Development Galway / Dublin, Ireland - coming soon ... ( vague but descriptive isn't it )
Recent Work: Safari Club African Safari Holidays - Malawi Safaris
Other Stuff: FluffyLinkulator Rapid Inclusion Service Tools
Jumper Stuff: Task Drop's Official Geansai Gorm Website

and it was dormant for 4 months which means i would have backed up and restored the dodgy file

yeah the problem with backups ... they only go back so far ...

had one customer before who let the site expire ... and then removed the domain for the site as well the the folders ... and told me a few weeks later it wasn't working on the other domain they had ... *sighs*

of course backups were only good for 2 weeks .. and they'd managed to delete all the files by removing the domain from the account entirely *sighs*

ah well you live and learn (or they live and learn) ... they shouldn't have been dealing with stuff they didn't know about .. and just paid me a few quid for support and I'd have had it all taken care of ...

Having only the development site meant they were pretty much screwed with all the new content they had added