special

Oct 2 2006, 01:42 PM

Hello its 15:40 and I login see if everything runs oke, and I see numerus things deleted my mysql is working again. Whats going on? My Webpage couple websites got deleted, and server folder files now whats going on? my forum also give errors but mysql db stil there ...

Reply

special

Oct 2 2006, 02:17 PM

Actually its a standard phpbb plus installation, it work but when I got to bed and woke up again. All errors on the forum and folders missing even server folders. That come with standard installation.

I dident do anything they simply disapeard dunno why or who hope the admin coud see the logs or something if a ( person ) did this I want his ip ban him on anything I can. I dunno what happen

Reply

AeonLan

Oct 2 2006, 02:23 PM

Check the logs folder for access logs and error logs. That may help us. If available, please attach them.

Reply

Latest Entries

BuffaloHELP

Oct 3 2006, 12:00 AM

Do not spread rumors with situation that you're not familar. If cPanel is easily compromised as you are accusing, don't you think Trap17's 200+ members haven't already experienced it? Why is that just your account is affected?

This was the reason why I listed few scenarios. Please do not post with opinions that you cannot explain with a proof. IE7 is still under Beta testing phase and cannot auto secure with security authentication unless it is manually established. Do not blame Trap17 or cPanel.

Your hosting account was compromised out side of Trap17 control--this means either someone found out your password or performed injection that which your scripts were vulnerable. Let me guide you with directives:

1) cPanel was never reported as compromised
2) if you think an account was compromised, it's because someone had the right password
3) someone could not have had your password because your PC is secure, so what? Then it was an injection attack on your script(s)
4) my scripts were secure so it could not have been that. So someone exploited my account. Then see #1

To terminate your hosting go to the same Process page http://www.trap17.com/process which you used to create an account. It helps to read *everything* about Trap17

I just read your application, so this topic is now closed.

Reply

special

Oct 2 2006, 09:27 PM

Problem is not a phpbb plus forum, it has over 200 mods installd with over 20 protection mods. Inc protection way up 2 date. Also IE7 gives a insecure connection for cpanel. I think cpanel is not up 2 date and needs 2 be secure.

Microsoft says its not so its not..cpanel coud be the exploid.

Reply

Panzer

Oct 2 2006, 08:08 PM

I think theres an easier explanation, phpbb plus.
Im not sure how many of you go into the hacking underworld on the internet but there are hundreds of exploits for phpbb forums. The forum by itself is pretty stable, as long as its up the latest version.

You can gain admin access through the Gender Mod... phpbb plus has that.

Another big thing about premoddded forums is that they are never up to date with the latest phpbb version. There was a big exploit found a couple of versions ago which you could see the admin/username password as well as FTP info, where it connects too etc.

That may have happened to you, im not sure. Dont use premods in the future, do it yourself!

Reply

special

Oct 2 2006, 07:41 PM

K gues all do that, questions tho. 1: When I terminate it coud I get the same account back then reseted with a new pass?

And how or where do I terminate.

Also I will use a more complex password in the future. Second keyloger? well I reinstalld this server within maintaince hour. So shoud be oke now altho I never go on unsafe sites.

All be more watchfull with my accoun in the future thanxs for the great support gy's ( edit) terminated my account stil hope I can get my old 1 back. ( edit) terminated my account, now question remains can I get the same 1 back.

Reply

BuffaloHELP

Oct 2 2006, 07:07 PM

Looking at your directory structure, you're missing many original folders and files that were established while initial hosting account setup.

This can be done only two ways: 1) someone had access to cPanel, deleted and dumpted recycle bin or 2) someone deleted using FTP. FTP leaves no trace of activity unless you enable FTP log.

Before you go on and say things like, 'no one has access to your account except for person(s) you trust' this is the only way it could have been done' at the current directory structure that is the only explanation. Always keep your username and password safely guarded. Maybe a keylogger snatched your password? Who knows. I am not at your computer. But my speculation is that someone deleted them using FTP. If someone deleted by using cPanel, your whole account would have been compromised including your database, redirect etc.

To restore your original files and structures, you have to terminate your current hosting and reapply for another one.

Reply

1. Mysql Database Not Working - (3)
2. Mysql Database Setup : Setting Up Mysql Database - Guide to use MySQL database in your site (6)

   A SMALL INTRODUCTION TO DATABASE ============================= I have seen that many members have
   problems with Database. Here is a small INFO which should give you the IDEA. mySQL is a DATABASE
   server. You can access it using the link in Cpanel. Cpanel can be accessed by
   "www.YOUR-SITE.com/Cpanel" There you have 4 Main Options :- 1> CREATE A DATABASE 2> CREATE A USER
   3> ADD USER TO DATABASE 4> PHPMYADMIN CREATE : IT ALLOWS YOU TO CREATE A DATABASE CREATE USER
   : IT ALLOWS YOU TO CREATE A USER. USING THIS, YOU CAN ACCESS THE DATABASE. A DATABASE CANNOT BE...

3. It Went Well For A While - MySQL problem back in all its glory. (5)

   Some time ago I had a stubborn problem when trying to access one of the interactive pages on my
   website and getting the following error: QUOTE Warning: fopen() : open_basedir restriction in
   effect. File(include/errors.xml) is not within the allowed path(s):
   (/home/mrdee:/usr/lib/php:/usr/local/lib/php:/tmp) in
   /home/mrdee/public_html/admin/include/commonfunctions.php on line 682 Warning:
   fopen(include/errors.xml) : failed to open stream: Operation not permitted in
   /home/mrdee/public_html/admin/include/commonfunctions.php on line 682 Cannot open XML data file:
   incl...

4. Is The Database System Gone Again? [resolved] - Errors on PHPMyAdmin again (12)

   I wonder if there is a problem with the PHPMyAdmin system again? When trying to get into it, I once
   again get the following: QUOTE Warning: session_write_close() : SQLite: session write query
   failed: database is full in /usr/local/cpanel/base/3rdparty/phpMyAdmin/index.php on line 42
   Warning: session_write_close() : Failed to write session data (sqlite). Please verify that the
   current setting of session.save_path is correct
   (/var/cpanel/userhomes/cpanelphpmyadmin/sessions/phpsess.sdb) in
   /usr/local/cpanel/base/3rdparty/phpMyAdmin/index.php on line 42 Warning: Ca...

5. How Do I Find My Mysql Password? [resolved] - Cannot access my MySQL (5)

   After all the recent problems, my account has been restored. I have setup my parked domain agin, and
   that works fine. However, I can no longer access my MySQL databases (I can from PHPMyAdmin, but
   that's all). I had to create a new user for my databases, and created the user with exactly the
   same username and password I had before, but some of my web pages do not let me access the pages I
   have associated with my databases. Where could i find out what my DB password is? (Although I am as
   good as sure I am using the right one). I have tried my old password, the new c...

6. Remote Access Mysql - (8)

   Is it possible to directly access my local database from my website? For example, if somebody
   submits info on my website, the info they submitted would be transferred to my local database
   directly. Is that possible? And if so, how do I set that up? The reason I don't want to upload
   my database to my subdomain is because it would be difficult to keep the website database and my
   local database in sync . . . or is there a way to do that? Thanks for any replies....

7. I Cant Access The Server! - (1)

   i can not establish a connection AT ALL!! my ftp program (Core FTP LE) cannot connect,
   neither can my online ftp..... also, i cannot log in to my cpanel!! in short, i
   cant do ANYTHING!!! can anyone help me?? better question, is the server down? and im
   not aware of it? /mad.gif" style="vertical-align:middle" emoid=":angry:" border="0" alt="mad.gif"
   />...

8. Is It Possible To Access The Mysql Remotely? - (10)

   I like to experiment with a lot of things and I was thinking of making a sort of instant messenger
   in Python, but I want to let people have actual accounts so I need to be able to access the mySQL
   remotely. If that's not possible, are we allowed to run Python scripts on the server?...

9. Installing Apache, Mysql, Phpmyadmin Locally - Solving the "php_mbstring.dll missing" (5)

   Since Trap17's CP provide the individual site's owner with goodies like MySql and
   PhpMyAdmin, chances are some will want to make use of them. Well, it's fine enough to get that
   on one's host (Gee! Thanks a lot, Trap17...) Knowing how the usual geek react, it might be
   expected that most people considering to make use of a database on their site will want to do most
   of the tedious job of developing and testing on their own local system before sending the wrapped-up
   result on their domain/subdomain. This involves four basic steps (sorry for the compuwi...

10. Site Down After Server Transfer - (3)

    Hello, I am wandering why my site is down after server transfer. I cannot access control panel
    also. Few days ago I was able to ping the site however now I cannot do that either. My domain name
    is: zedsi.com however my main traffic is comming from my blog: blog.zedsi.com Any suggestions why
    it is still down would be appreciated. On the other hand I have checked on
    www.xisto.com/network-status and gamma is online. Thanks in advance. Best Regards, Hitmanblood...

11. Gamma Servers' Problem - This topic is for all who have their account on Gamma Server & ha (1)

    Okay I see a lot of chaos all around and my site zoebelkin.co.cc is still down. Everything including
    FTP, CPanel etc are down. My site is on the gamma server. I see that all the servers are moved
    around a lot and the IP blocks also changing. So what is the new IP set for 'gamma'. When
    doing a reverse check on gamma I see it is still assigned to it's previous IP but when I'm
    trying to access the previous IP's port 80 then I get a Server not found error. Also the
    gamma.xisto.com name for the server fails to open the default Apache page which it used to ...

12. Server Issues? Web Site Down? Cpanel Access? - Server Migration issues to report. (48)

    I tried downloading my email from website this morning and Thunderbird said it couldn't access
    it the server. Then I tried loading my website - to no avail. Does anyone have any idea what's
    going on? Is anyone else experiencing this? Seems like this is the second time this spring this has
    happened. Is an upgrade going on, or something? Thanks in advance for your help! ...

13. Name Server Question - Why is the nameserver changed ? (3)

    CODE NetRange:   64.69.32.0 - 64.69.47.255 CIDR:       64.69.32.0/20
    NetName:    COREEXPRESS-BLK-1 NetHandle:  NET-64-69-32-0-1 Parent:     NET-64-0-0-0-0
    NetType:    Direct Allocation NameServer: NS1.CALPOP.COM NameServer: NS2.CALPOP.COM
    Comment:    ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE RegDate:    2000-04-11
    Updated:    2004-08-06 RNOCHandle: ZC46-ARIN RNOCName:   ipadmin
    RNOCPhone:  +1-213-627-1937 RNOCEmail:  ipadmin@coreexpress.net RTechHandle: ZC46-ARIN
    RTechName:   ipadmin RTechP...

14. Wordpress Backup For A Server Move - backing up a Wordpress site (2)

    i have question: how can we backup wordpress from fantastico...is it possible to backup and move
    it to new host if you want?...

15. Genuine Help With Smtp And Php Mail() Function - I need help using the PHP mail() function and the SMTP server on Trap1 (3)

    Hello, I have looked up the solution to this problem numerous times on this forum but cannot seem to
    get a straight answer. I have also read that something called SMTP Authetication is required. I have
    looked up numerous ways this should be done, but I believe it required special protocols. This is
    the code that I tried to use to send e-mail using the SMTP server here at Trap17. CODE
    $email_to = "whoever@whoever.com"; //SEND MAIL TO HERE $subject = "Testing the
    SMTP server"; $message = "This is a test of the SMTP server on T...

16. Directory Restricted? - I can't edit one of my site's directories (7)

    My website is split into two directories: "site", which is my main site's content, and "forum",
    which explains itself. The "site" directory is mostly filled with Joomla! files due to my
    website using the Joomla! CMS. Previously, I was able to upload templates and extensions to
    Joomla! without fail. However, since today whenever I've done either of these I just get
    "failed" messages. Unable to source it to a problem with Joomla, I tried to access the directories
    using FTP. I was able to access and rename all my directories using FTP, but whenever I t...

17. Server Status Link Doesn't Work - (1)

    Hey, I tried going to the xisto menu on the top right of the forums and the server/network status
    link doesnt work, it leads to: http://www.xisto.com/helpdesk/index.php?cmd=status I get, The
    requested URL /helpdesk/index.php was not found on this server. Is this a out-dated link?...

18. My Site's Ip Address - Finding out my numerical IP address (5)

    Hi, I was wondering how I can find the numerical IP address of my site. I have my site hosted at
    Trap 17, but instead of a subdomain i use my own (parked) domain name. Can anyone tell me how I can
    find the address of my web site in the shape of 81.200.30.55 (this is just a random example) instead
    of in the shape of http://www.vlaanderen-flanders.org.uk ? Thanks for any advice. ...

19. Whats The Server? - (3)

    hey guys, im working with a script, heres the part im trying to figure out: QUOTE
    $gc_do_caching = 0; $gc_cache_time = 3600; $gc_use_sql = 0;
    $gc_sql_server_host = ""; theres a lot more, but its not needed, i wanna know what the sql
    server host for trap17 is?...

20. Question About The Upgrade And The Mysql Usage ? - question about the upgrade and the mysql usage? (3)

    thanks for the upgrade but i do have question about it QUOTE Domain name zam.trap17.com
    Hosting package Beta Subdomains 3 / 99 Parked Domains 0 / 9 Addon Domains 3 / 9 Mysql databases
    1 / 99 PostgreSQL Databases 0 / 99 Disk usage 14.25 / 500.00 MB MySQL Disk usage 0.82 MB
    Disk space available 485.75 MB Bandwidth (this month) 6.59 / 10240 MB Email accounts: 1 / 99
    Email forwarders: 1 / unlimited Autoresponders: 0 / unlimited Email filters 0 / unlimited
    Mailing lists: 0 / 99 FTP accounts 3 / 99 1-Bandwidth (this month) 6.59 / 10240 MB ...

21. Help: Internet Server Error - (20)

    Hello! I decided to try YaBB as a forum now, just testing....and ... Well first my question is,
    this is in ADDONSCRIPTS, not FANTASTICO, whats the difference? Secondly, about my problem: I was
    in the YaBB admin panel, I got through the Forum Settings, got to Advanced settings, filled out the
    info, and pressed save. The 5000 times I have tried this, I get this: QUOTE Internal Server
    Error The server encountered an internal error or misconfiguration and was unable to complete your
    request. Please contact the server administrator, webmaster@sherwoodinfo.trap1...

22. Is The Server Ok? - FTP and loading problems. (1)

    At the time of writing this (01:12 GMT) I seem to have problems FTPing to my site (Time out
    problems), and, to a lesser extent, page loading problems. I just wanted tocheck whether the servers
    are OK or whether the problem is on my end. Please let me know if you can. ...

23. How To Know If Account Is Deleted - (8)

    I think my trap17 account was deleted. How do we know? I guess our sites not working is a good
    enough indication, but i want to be sure. And if accounts are deleted, are all the files deleted
    also?...

24. Help With A .rar File In Ftp Server - Cannot unrar the file. (4)

    I uploaded a .rar file into my FTP but I cant unrar it. I have uploaded it before in zip format but
    I think it got curropted so I reuploaded again. is theren a way to unrar this file? I am concerned
    about this because it took me quite some to manage to upload it using a very slow internet
    connection. I need help here please,....

25. How To Crate Mysql Database? - urgent help (7)

    Hi everyone!
    I'm trying to make in my site a page system that allows me to create users
    account (with a foto for every user)...
    I'm doing that in PHP, I learned all I have to
    know about PHP and MY SQL. I know how to make new array and querries in the data base, only 1 think
    is messing: ...

26. Need Help With My Database - I cannot transfer my old site's database (19)

    I Couldn't import my database info via Import from php my admin and i got the .sql file from the
    php my admin of my old hosting and every time i try to import it give me an error that i don't
    have the permissions to do.... /sad.gif" style="vertical-align:middle" emoid=":(" border="0"
    alt="sad.gif" /> What shall i do?? I need Help Please...

27. Does Trap Use An Apache Server [resolved] - (3)

    Well I just installed a mod, and it said you must have an Apache Server or something. SO does trap
    use an Apache Server and if not is there anyway we can since it says its free...

28. Question About Adding Message Board To Site - Using mysql? (5)

    Hi, Super simple question from a simple laddie! Is a MySql database a messageboard? If not
    how can I set up a messageboard. Thanks. std split from another topic ...

29. Help! I Deleted All My Files! - (5)

    Hi guys, i got hosted yesterday and i loged on to my file manager and deleted all the files in there
    i replaced them with my site including the index.htm page and now when i try to view it it says no
    page found!!! i dont no why this is as with my site when i payed for hosting from
    one.net it was as simple as using the run program and typing in mt ftp:\\ account copy the
    index.htm file and i was up and running! Can anyone help with what i have done wrong please
    thank you. /sad.gif" style="vertical-align:middle" emoid=":(" border="0" alt="sa...

30. Trap17 Ftp Settings - There is a mistake in the trap17 FTP server address (3)

    After you are approved for free host account you must activate by going to a link sent in an email.
    On the confirmation page that appears after the activation script is finished you will see all sorts
    of data including your web URL and how to access control panel etc. .. At the bottom of the page for
    those who would rather configure an FTP program like Dreamweaver or CuteFTP you will see the FTP
    server address listed as: ftp.projectorange.trap17.com.com This is wrong and should read:
    ftp.projectorange.trap17.com Do not use passive ftp Host directory is optional (set...