File Emptied - Can I get it back?

[big-c]

Hello everyone. These are some impressive forums!

Running: FreeBSD 5.3

I ran into a pretty big problem. Today, I went to open up a 700 line PHP script, on which I had been working for my job. When I opened....it was empty, not a single line!! Unfortunately, I had no backup file on my local machine. Currently, I have been checking the logs to check for any signs of buffer overflows or any other security breaches.

What I need to know, is if there's any tool, or something I can use to retrieve an earlier version of the file. It wasn't deleted, it was emptied. I'd greatly appreciate any help that you might be able to offer!

Thank you

[jimbaloo]

If you have midnight commander I believe you can use it to recover deleted files. In mc you will need to

cd /#undel:partitionwithdeletedfile

This should display a list of inodes you can look at with a text editor, F4 key, then save recovered files with F12 option.

Hope this works for you