Log in Register FAQ Memberlist Search Welcome to RCF - WHF Forum Index
alt : test.swf
Welcome to RCF - WHF
4fx3.gif 
calendar_open_closeCalendar 
Urgent help needed again :(
Post new topic   Reply to topic View previous topic :: View next topic
Goto page: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10  Next
Welcome to RCF - WHF Forum Index -> Area 51 - phpBB & Easymod Tech Support Add To Bookmarks
Urgent help needed again :(
PostPosted: 05/22/2007 3:34 AM Reply with quote
Citation
Karen
Citation
Posts 1253
Word Cnt. 68,166
BDay Nov 9
Sign Scorpio
Sex Sex:Female
Joined: Jan 06, 2006
Local time: 7:53 AM
greatbrE.gif
Just logged in today and I have a 'hacked by' message again on my portal page and on thread pages (not the index though) but most worrying is that all my files and folders are set as CHMOD 777 and I can't change them. I mean I change them but when I go back to them they are back to 777.
I'm just going to try livechat, but I'm not sure where to look for the 'hacked by' message, last time it was in my portal config.php but that's all clear  dontknow
It may be somewhere obvious but I'm really run down right now and am suffering from major lack of sleep so can't think straight  Rolling Eyes
Back to Top
View user's profile Find all posts by Karen Send private message   Visit poster's website Phoogle Map
Re: Urgent help needed again :(
PostPosted: 05/22/2007 3:42 AM Reply with quote
Site Admin
Nightrider
Site Admin
Posts 30757
Word Cnt. 2,628,690
BDay Jul 28
Sign Leo
Sex Sex:Male
Joined: Sep 25, 2004
Local time: 3:53 AM
Location: St Pete, FL
peace.gif
Do you happen to remember which file was modified the last time???

dontknow
Back to Top
View all pictures posted by this userView user's profile Find all posts by Nightrider Send private message   AIM Address Yahoo Messenger Phoogle Map ICQ Number
Re: Urgent help needed again :(
PostPosted: 05/22/2007 3:55 AM Reply with quote
Citation
Karen
Citation
Posts 1253
Word Cnt. 68,166
BDay Nov 9
Sign Scorpio
Sex Sex:Female
Joined: Jan 06, 2006
Local time: 7:53 AM
greatbrE.gif
Yeah it was my portal config.php file but that's all ok, this time its my portal page and when I open a thread its at the top. Live chat wasn't any good, she's told me to open a ticket.
Back to Top
View user's profile Find all posts by Karen Send private message   Visit poster's website Phoogle Map
Re: Urgent help needed again :(
PostPosted: 05/22/2007 3:56 AM Reply with quote
Site Admin
Nightrider
Site Admin
Posts 30757
Word Cnt. 2,628,690
BDay Jul 28
Sign Leo
Sex Sex:Male
Joined: Sep 25, 2004
Local time: 3:53 AM
Location: St Pete, FL
peace.gif
Ok, the reason why they succeeded in Hacking your site again is because the permissions were set to 777 on the babydreamz.net folder.  They uploaded at least two files to your server:

  1. index.php
  2. index.html

I created a tmp folder and moved both there.  But they overwrote your index file, so hopefully you have a good backup of it that you can upload to your babydreamz.net folder...

munky2
Back to Top
View all pictures posted by this userView user's profile Find all posts by Nightrider Send private message   AIM Address Yahoo Messenger Phoogle Map ICQ Number
Re: Urgent help needed again :(
PostPosted: 05/22/2007 4:04 AM Reply with quote
Citation
Karen
Citation
Posts 1253
Word Cnt. 68,166
BDay Nov 9
Sign Scorpio
Sex Sex:Female
Joined: Jan 06, 2006
Local time: 7:53 AM
greatbrE.gif
I'll have a look thanks , do you know why I can't change my permissions? I'm waiting for IX to get back to me but that could be a while.
Back to Top
View user's profile Find all posts by Karen Send private message   Visit poster's website Phoogle Map
Re: Urgent help needed again :(
PostPosted: 05/22/2007 4:11 AM Reply with quote
Site Admin
Nightrider
Site Admin
Posts 30757
Word Cnt. 2,628,690
BDay Jul 28
Sign Leo
Sex Sex:Male
Joined: Sep 25, 2004
Local time: 3:53 AM
Location: St Pete, FL
peace.gif
Yes, the reason why you can't change the permissions of the babydreamz.net folder is because the permissions of it's parent is set to 0.  So you don't have permission to do anything to the folder.  Ask IX to set the permission on the babydreamz.net folder to 755.  They might as well correct the babydrea folder too while they're at it.  In fact, they need to fix all of your top level domain/sub-domain folders.  They are all set to 777 and are vulnerable...

Shocked

Did you choose a Windows server rather than Linux???

dontknow


Last edited by Nightrider on 05/22/2007 4:15 AM; edited 1 time in total
Back to Top
View all pictures posted by this userView user's profile Find all posts by Nightrider Send private message   AIM Address Yahoo Messenger Phoogle Map ICQ Number
Re: Urgent help needed again :(
PostPosted: 05/22/2007 4:14 AM Reply with quote
Citation
Karen
Citation
Posts 1253
Word Cnt. 68,166
BDay Nov 9
Sign Scorpio
Sex Sex:Female
Joined: Jan 06, 2006
Local time: 7:53 AM
greatbrE.gif
Ahh ok! Its like that for all my sites so hopefully they will do that. Is that normal that they do that?
I can't see the temp folder you created  dontknow
Back to Top
View user's profile Find all posts by Karen Send private message   Visit poster's website Phoogle Map
Re: Urgent help needed again :(
PostPosted: 05/22/2007 4:16 AM Reply with quote
Site Admin
Nightrider
Site Admin
Posts 30757
Word Cnt. 2,628,690
BDay Jul 28
Sign Leo
Sex Sex:Male
Joined: Sep 25, 2004
Local time: 3:53 AM
Location: St Pete, FL
peace.gif
Did you choose a Windows server rather than Linux?  This would be normal for a Windows server, which appears to be what you are using.  You might want to ask them to switch you to a Linux server...

munky2

Your file permissions are even set to 777, which isn't typical for a Windows server.  They are usually set to 666 on Windows servers...

dontknow


Last edited by Nightrider on 05/22/2007 4:18 AM; edited 1 time in total
Back to Top
View all pictures posted by this userView user's profile Find all posts by Nightrider Send private message   AIM Address Yahoo Messenger Phoogle Map ICQ Number
Re: Urgent help needed again :(
PostPosted: 05/22/2007 4:16 AM Reply with quote
Citation
Karen
Citation
Posts 1253
Word Cnt. 68,166
BDay Nov 9
Sign Scorpio
Sex Sex:Female
Joined: Jan 06, 2006
Local time: 7:53 AM
greatbrE.gif
Nightrider wrote:
Yes, the reason why you can't change the permissions of the babydreamz.net folder is because the permissions of it's parent is set to 0.  So you don't have permission to do anything to the folder.  Ask IX to set the permission on the babydreamz.net folder to 755.  They might as well correct the babydrea folder too while they're at it.  In fact, they need to fix all of your top level domain/sub-domain folders.  They are all set to 777 and are vulnerable...

Shocked

Did you choose a Windows server rather than Linux???

dontknow


Yes Windows, I have no idea about Linux. Did I choose wrong?
Back to Top
View user's profile Find all posts by Karen Send private message   Visit poster's website Phoogle Map
Re: Urgent help needed again :(
PostPosted: 05/22/2007 4:19 AM Reply with quote
Site Admin
Nightrider
Site Admin
Posts 30757
Word Cnt. 2,628,690
BDay Jul 28
Sign Leo
Sex Sex:Male
Joined: Sep 25, 2004
Local time: 3:53 AM
Location: St Pete, FL
peace.gif
Yes, you should have chosen a Linux server.  They are more reliable and you have more power to control your site...

Shocked
Back to Top
View all pictures posted by this userView user's profile Find all posts by Nightrider Send private message   AIM Address Yahoo Messenger Phoogle Map ICQ Number
 Post new topic  Reply to topic
Information
Welcome to RCF - WHF Forum Index -> Area 51 - phpBB & Easymod Tech Support

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum
All times are GMT - 5 Hours
Goto page: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10  Next
Page 1 of 10


Add To Bookmarks

 
  
  


  Google

Powered by phpBB © 2001, 2005 phpBB Group

Page generation time: 0.0741s (PHP: 63% - SQL: 37%) - SQL queries: 58 - GZIP disabled - Debug on