Yup, CCBill's answer to this is hide the script with a very very long directory name with lots of random numbers and letters.
They also used to leave a whereami script used by their techs in the cgi-bin directory after a new install that had a hole you could drive a truck thru in it.
Epoch's old scripts also had holes. As long as CGI's are used to add passwords, there'll always be hacks.
|