So, they are able to access your site files? Even after you've changed your password? I suggest you contact your host immediately, because this is a serious security breach.

If your host is reputable, they will find out what's going on. They have tools for that sort of thing. If your host is not reputable, then (if I were you), I'd find a new host immediately. I use Dreamhost, for example. Never had a problem.

Forgive me if these seem like a dum-dum questions... Are you SURE that you are overwriting the old file with a new file you've made? Are you SURE you changed the password? When you upload the corrected file, do you IMMEDIATELY check to see that that is what's still on your server? Have you done a cache flush to make sure you're not just looking at an old cached page?

These suggestions may be classified under "duh, I already know that", but just in case:


Are there any FTP, FrontPage or similar accounts other than the one you use? FTP sends username/password as plain text, so it's relatively easy for an enterprising hacker-type to intercept.

Does anyone have physical access to the computer you use?

Have you entrusted anyone else to access your site?

Check for spyware, viri, and especially key loggers. even if nobody else physically uses your machine, they can do their intercept remotely.


--k

If you are using Firefox, you might be able to do that using iMacros. You might be able to set up a macro that runs your whole site. Then, whenever you run the macro again, it runs the site and tells you what's different. I THINK.

Man, your host sure fucked up. Sorry, dude. They should send someone around to give you Pop-Tarts and a rubdown after all that hassle.

I would hate to be them.