I’ve been having to sort out some websites after some ‘script kiddies’ attacked it. My own fault really for not acting upon vulnerability announcements quickly enough (having been too occupied with other demands). Although to be honest I didn’t expect these sites to warrant such attention.
Up until now I’ve looked at hackers as at worst a mild pain (same as spammers) – when compared to say, virus writers. If they get into your site, and make it clear to you that they can get in, you really can’t complain too much. What really is annoying is when they destroy all your content, and then get their scripts to keep hitting you when you’re trying to identify and fix the vulnerability and restore things.
For me the worst aspect of it is that I’ve had to take sites down for a day or so, as I can only sort things out in my spare time. This means that mean time the innocent victims are the users can’t make use of the resource. Like many, aside from my own domain, the other domains I run are done as a charitable thing, and I’d rather they didn’t lose out.
I’ve had to build a few small bespoke components and modules. I’ve started to make the source 
for these available. The first being my email forwarder, the details of which can be found at in the 
To press releases to day for SeeWhy, one about the ‘BPM Integration Kit’ with a nice quote from Matt Cumberlidge (
Phil (aka MP3Monster)'s Blog 