 | Urgent help needed again :( |  |
Posted: 05/22/2007 3:34 AM |
|
|
|
|
|
| Citation |
| Posts |
1253 |
| Word Cnt. |
68,166 |
| BDay |
Nov 9 |
| Sign |
Scorpio |
| Sex |
 |
|
|
|
Joined: Jan 06, 2006
Local time: 7:53 AM
|

|
|
|
|
 |
Just logged in today and I have a 'hacked by' message again on my portal page and on thread pages (not the index though) but most worrying is that all my files and folders are set as CHMOD 777 and I can't change them. I mean I change them but when I go back to them they are back to 777.
I'm just going to try livechat, but I'm not sure where to look for the 'hacked by' message, last time it was in my portal config.php but that's all clear
It may be somewhere obvious but I'm really run down right now and am suffering from major lack of sleep so can't think straight  |
|
|
 |
 |
| Back to Top |
|
|
 | Re: Urgent help needed again :( |  |
Posted: 05/22/2007 3:42 AM |
|
|
|
|
|
| Site Admin |
| Posts |
30757 |
| Word Cnt. |
2,628,690 |
| BDay |
Jul 28 |
| Sign |
Leo |
| Sex |
 |
|
|
|
Joined: Sep 25, 2004
Local time: 3:53 AM
Location: St Pete, FL
|

|
|
|
|
 |
Do you happen to remember which file was modified the last time???
 |
|
|
 |
 |
| Back to Top |
|
|
 | Re: Urgent help needed again :( |  |
Posted: 05/22/2007 3:55 AM |
|
|
|
|
|
| Citation |
| Posts |
1253 |
| Word Cnt. |
68,166 |
| BDay |
Nov 9 |
| Sign |
Scorpio |
| Sex |
 |
|
|
|
Joined: Jan 06, 2006
Local time: 7:53 AM
|

|
|
|
|
 |
| Yeah it was my portal config.php file but that's all ok, this time its my portal page and when I open a thread its at the top. Live chat wasn't any good, she's told me to open a ticket. |
|
|
 |
 |
| Back to Top |
|
|
 | Re: Urgent help needed again :( |  |
Posted: 05/22/2007 3:56 AM |
|
|
|
|
|
| Site Admin |
| Posts |
30757 |
| Word Cnt. |
2,628,690 |
| BDay |
Jul 28 |
| Sign |
Leo |
| Sex |
 |
|
|
|
Joined: Sep 25, 2004
Local time: 3:53 AM
Location: St Pete, FL
|

|
|
|
|
 |
Ok, the reason why they succeeded in Hacking your site again is because the permissions were set to 777 on the babydreamz.net folder. They uploaded at least two files to your server:
- index.php
- index.html
I created a tmp folder and moved both there. But they overwrote your index file, so hopefully you have a good backup of it that you can upload to your babydreamz.net folder...
 |
|
|
 |
 |
| Back to Top |
|
|
 | Re: Urgent help needed again :( |  |
Posted: 05/22/2007 4:04 AM |
|
|
|
|
|
| Citation |
| Posts |
1253 |
| Word Cnt. |
68,166 |
| BDay |
Nov 9 |
| Sign |
Scorpio |
| Sex |
 |
|
|
|
Joined: Jan 06, 2006
Local time: 7:53 AM
|

|
|
|
|
 |
| I'll have a look thanks , do you know why I can't change my permissions? I'm waiting for IX to get back to me but that could be a while. |
|
|
 |
 |
| Back to Top |
|
|
 | Re: Urgent help needed again :( |  |
Posted: 05/22/2007 4:11 AM |
|
|
|
|
|
| Site Admin |
| Posts |
30757 |
| Word Cnt. |
2,628,690 |
| BDay |
Jul 28 |
| Sign |
Leo |
| Sex |
 |
|
|
|
Joined: Sep 25, 2004
Local time: 3:53 AM
Location: St Pete, FL
|

|
|
|
|
 |
Yes, the reason why you can't change the permissions of the babydreamz.net folder is because the permissions of it's parent is set to 0. So you don't have permission to do anything to the folder. Ask IX to set the permission on the babydreamz.net folder to 755. They might as well correct the babydrea folder too while they're at it. In fact, they need to fix all of your top level domain/sub-domain folders. They are all set to 777 and are vulnerable...
Did you choose a Windows server rather than Linux???
 |
|
Last edited by Nightrider on 05/22/2007 4:15 AM; edited 1 time in total |
|
 |
 |
| Back to Top |
|
|
 | Re: Urgent help needed again :( |  |
Posted: 05/22/2007 4:14 AM |
|
|
|
|
|
| Citation |
| Posts |
1253 |
| Word Cnt. |
68,166 |
| BDay |
Nov 9 |
| Sign |
Scorpio |
| Sex |
 |
|
|
|
Joined: Jan 06, 2006
Local time: 7:53 AM
|

|
|
|
|
 |
Ahh ok! Its like that for all my sites so hopefully they will do that. Is that normal that they do that?
I can't see the temp folder you created  |
|
|
 |
 |
| Back to Top |
|
|
 | Re: Urgent help needed again :( |  |
Posted: 05/22/2007 4:16 AM |
|
|
|
|
|
| Site Admin |
| Posts |
30757 |
| Word Cnt. |
2,628,690 |
| BDay |
Jul 28 |
| Sign |
Leo |
| Sex |
 |
|
|
|
Joined: Sep 25, 2004
Local time: 3:53 AM
Location: St Pete, FL
|

|
|
|
|
 |
Did you choose a Windows server rather than Linux? This would be normal for a Windows server, which appears to be what you are using. You might want to ask them to switch you to a Linux server...
Your file permissions are even set to 777, which isn't typical for a Windows server. They are usually set to 666 on Windows servers...
 |
|
Last edited by Nightrider on 05/22/2007 4:18 AM; edited 1 time in total |
|
 |
 |
| Back to Top |
|
|
 | Re: Urgent help needed again :( |  |
Posted: 05/22/2007 4:16 AM |
|
|
|
|
|
| Citation |
| Posts |
1253 |
| Word Cnt. |
68,166 |
| BDay |
Nov 9 |
| Sign |
Scorpio |
| Sex |
 |
|
|
|
Joined: Jan 06, 2006
Local time: 7:53 AM
|

|
|
|
|
 |
| Nightrider wrote:
|
Yes, the reason why you can't change the permissions of the babydreamz.net folder is because the permissions of it's parent is set to 0. So you don't have permission to do anything to the folder. Ask IX to set the permission on the babydreamz.net folder to 755. They might as well correct the babydrea folder too while they're at it. In fact, they need to fix all of your top level domain/sub-domain folders. They are all set to 777 and are vulnerable...
Did you choose a Windows server rather than Linux???
|
Yes Windows, I have no idea about Linux. Did I choose wrong? |
|
|
 |
 |
| Back to Top |
|
|
 | Re: Urgent help needed again :( |  |
Posted: 05/22/2007 4:19 AM |
|
|
|
|
|
| Site Admin |
| Posts |
30757 |
| Word Cnt. |
2,628,690 |
| BDay |
Jul 28 |
| Sign |
Leo |
| Sex |
 |
|
|
|
Joined: Sep 25, 2004
Local time: 3:53 AM
Location: St Pete, FL
|

|
|
|
|
 |
Yes, you should have chosen a Linux server. They are more reliable and you have more power to control your site...
 |
|
|
 |
 |
| Back to Top |
|
|
 | Information |  |
|