Security issue
I have a security issue on my website. The script code has been added to my pages like " <script src="Ip address/viewpic.asp"></script>
". It is located between tags </head>
and <body>
. Now Google says, "This site can be tough on your computer!" about my site. How can I secure my site? I am using C # and Visual Studio 2008.
a source to share
You have been hacked. This code added to your site tries to hack the web browsers that visit your site.
This could have happened in several ways. The powerful thing for you is to download an antivirus like AVG and scan any machines that have access to the site. There is malware looking for FTP connections, it hijacks username / password, then registers and modifies the files it finds. You should use SFTP which can be installed under windows, FTP is only used by people who don't know better or like to hack, or both.
A more difficult possibility is that there is a vulnerability on your site. It requires a professional (like me) to track and fix. Acunetix can help you find flaws in your site, but it may not find the vulnerability that was exploited for the hack.
a source to share
Edit . Assuming the script is your own and not evil:
You shouldn't have any code between </head> and <body> - Otherwise you have the <script> tag as a direct child of <html> which is not allowed.
Put the <script> tag inside the <body> in the correct place where you want to execute the script to fix the structural problem, but you need to provide more information on the exact error messages you see about security as I don't know what Google shows error messages in its search lists and I don't have google toolbar installed to know what it does; but I don't believe there are typos in it;)
Therefore, please provide more details on the precise security warnings once you have corrected - and validated (with the W3C Validator) - the structure of your HTML.
Edit : If the script is not intended to be used and appeared outside of your desire: Look in the HTML source where the script is present; and compare with your ASPX pages to see where the script appears. If it is displayed by one of your controls, you need to check where it comes from. If it is a database, you need to focus your attention on what gets the information in the database first. If the script is injected and not in one of your controls, then you should talk to your provider, I would think.
a source to share