Recently I was subject to a hack by "HACKED BY SyRSyR!4N M43STR0". Thankfully, no real damage.
I am trying to figure out how they got in and was checking my permissions on some of my folders. I'm not sure I understand what user gives the public user visiting the site access to the website.
Here is some examples:
- Should any user have write capabilities on the folders that are in my site?
- How about execute capabilities?
- Lastly, who is the 'public' user that when the user visits the site that gives them access? <-- this is one of my main questions
===== EDIT #1 =====
I have some sites that do not have an app pool account on them such as:
How is the user able to access the site with no app pool account access? Is the app pool the default user account? Also, should I add the account manually?