Since this site is in a sub-folder, if I made some security changes such as Mscott recommended...would this cause the prob?
i.e.
6. Block "libwww" bots and "remote file includes"
These lines in your home directories .htaccess will block ANY thing
with the user agent "libwww" or "Wget".. they are both bad guys 99% of
the time
RewriteCond %{HTTP_USER_AGENT} ^libwww [OR]
RewriteCond %{HTTP_USER_AGENT} ^Wget
RewriteRule .* - [F]
This lines will block any remote file from being included in a local file, which is what is happening with this recent deal:
RewriteCond %{QUERY_STRING} ^http [OR]
RewriteCond %{QUERY_STRING} ^.+www\. [OR]
RewriteCond %{QUERY_STRING} ^.+https [OR]
RewriteCond %{QUERY_STRING} ^.+\.txt [OR]
RewriteCond %{QUERY_STRING} ^ftp
RewriteRule .* - [L,F]
5. Put appropriate .htaccess files in the 777 dirs.
.htaccess files are recursive meaning that if you put one in a
directory all the subdirectories are effected. So in my media directory
I block ALL scripts like this:
<LimitExcept GET>
order deny,allow
deny from all
</Limit>
<FilesMatch "\.(cgi|pl|py|bak|txt|htaccess|htpasswd|log|zip|asp|sh|shtml|js.*|gz|tgz|tar|php.*|htm.*)$">
Deny from all
</FilesMatch>
That "limitexcept" blocks all "put" and "post" requests too. You
CAN'T use this in a directory that has .php files inside it.. or any of
the sub-dirs. But it SHOULD be inside ALL the /files directories for
each ray widget, and the /media directory.