Someone told me he hacked my Linux system and got my USER.DB file of
mail2000 system. The way he use is
"http://www.mywebsite.../dc_search?dir_path=...". Can anyone tell me
the exact linker he typed. And show me how it works.

---

Request for Question Clarification by maniac-ga on 02 Oct 2005 20:05 PDT

Hello Mybabyclock,

If you can't dig the answer out of the web server logs (as suggested
by bozo99), you may want to indicate "which" dc_search you are using
and where a copy is available publically (to analyze). There are cfm,
cgi and asp scripts with that name (I assume yours is not the last
one...).

  --Maniac

You should find the answer in the log kept by your webserver.

Here's a good introduction.
http://www.advosys.ca/papers/web-security.html