[geeklog-devel] Hmm ...

[Tom Willett]

I would send the same notification to both.  Both need to know.  The site 
owner has the right to know that their provider did not do a good job of 
securing the site and the Site provider needs to know that they messed up and 
that the customer knows.

I would also check for the pma directory.  It wouldn't suprise me if they 
left that open also.

--
Tom Willett
tomw at pigstye.net