Hopefully someone can help or offer some advice here:

We have had 2 instances now in the space of a year where our hosting company has contacted us saying we have malware files in the docroot of our CRE 6.3.2 website.

I spoke to a technical bod at the hosting company and he suggested that there is more than likely a vulnerability with a form/forms on the website, where they arn't properly or securely validating the data being entered. He said that its unlikely to be a form dealing with transactions? But some other form?

I haven't got a clue where to start here really, is anyone aware of a vulnerability with some of the forms in 6.3.2? Someone suggested just updating the site with a security patch but I not only altered the template, I altered some of the other core php files becuase there were bugs or the info wasnt being displayed as we wanted, so if I overwrite this files with a newer version of CRE Loaded, I will have to do all that work again

Any help would be gratefully received.

Andy.

Check your file permissions and look for a better server....