I think there is a chance that the issue is with your hosting company getting hacked. Are you locked in to a hosting company? Can you experiment with running the site on a different hosting company for a trial and try to reproduce the issue?
I think there is a chance that the issue is with your hosting company getting hacked. Are you locked in to a hosting company? Can you experiment with running the site on a different hosting company for a trial and try to reproduce the issue?
I'm on a dedicated server, so it's not the hosting company. And they've been pretty active in trying to solve it. Although now we have a better handle on the actual issue after what I just figured out. My problem was I needed to be able to reproduce it to test one theory I had, and now that it's worked it's made it easier to pinpoint.
This might be a completely random comment but I would guess that the exploit itself would be in one of your SQL tables. I've seen people exploit web sites through the search bar (or other open input fields) by typing php code in there to make changes in the SQL. Or alternatively, they exploit the php access to sql built into the links. I don't know if that is even remotely helpful to you but I thought I would mention it.
Yeah - I'm not snickering. I have the techs working on it now because the problem lies in an area that I don't have access to at work. Hopefully we'll be clear by the end of tonight now that I'm no longer fumbling around where I initially thought it was.