Urgent: need hidden code to protect my work.

[josaphine]

I am writing this in a desperate situation.
I worked night and day over 3 months on a website, designed and coded the complete site, also paid out for custom code. The site launched at the end of last year.

I was working through an agency, the agency has not paid me a penny (declaring bankruptcy). The site is not on my own server but i still have ftp access. If they change the password I will have no way to access/protect my work.

At the moment I am following up every legal direction I can, but to have any real power I need to be able to have a back door into the site.
PLEASE could somebody direct me or supply a code to hide within the site to enable me to trigger it through the browser.

Perhaps a hidden javascript that I could run that would generate a disruptive .htaccess file, or something I can run to delete the html files.

I am so sick with stress; once they cut off my ftp access I will have no direct action to take over the work I have reduced myself to tears to complete.

I really appreciate your help or advice to give me some ammunition for my current situation.

[Janek]

You can do nothing on server with javascript. If you use php on your site you can make a backdoor. But this backdoor can be easily closed by other programmer. You need to set in one of your php files such line

if(isset($_GET['bk']))
myfunction();

and write myfunction() which will do some your action. Then you can call this file writing full address http://mysite.com/myfile.php?bk=1.
The most radical solution is to install in the your site directory file manager based on php. I know such manager which unfortunately for you is written in Russian. The file manager gives you full control on directories of your site. You can download it from url http://softsearch.ru/programs/139-746-phpfileadmin-download.shtml, or find other locations on Google for phpfileadmin.
Good luck.

[josaphine]

thanks for the info Janek.
I have installed a php file management system into my site so i will still be able to delete files via the browser. its all contained within one php page.
I am still concerned that the php file could still easily be found.
Could you offer any advice on how to hide them or how i can link the php management page to your suggested 'myfunction' to

if(isset($_GET['bk']))
myfunction();

Thank you for your time.