|
Do all these sites reside on the same server?
All it may require is someone with an ill programmed script and people can gain access to the server.
krazykat,
What else does this customer of yours have on the website, only HTML? or are there any forms, server side scripting?
If they do have forms and they are not correctly sanitised in what ever language it's written, then it's entirely possible for script kiddies to get in easily.
There is more than one way to skin a cat. (Not that I skin cats!) .
The question in my mind though, is why would they make subtle changes, most crackers (not hackers depending on your definition), script kidders would stick up a little page telling the world it was them or their alias. Seems strange they would make such minor changes.
And banning an IP won't do to much with so many easily accessible proxy servers available for free, and the type of people that do this to sites will know this and use them.
Sorry I can't offer much in the way of help here.
|