How to modify add some html code (such as banner, header, footer) to every webpage? without modify original files.
Under <body> or above </html> tags.
Something like search and replace.
I've been having troubles with my website recently . I installed a forum software (MyBB), and the problem started happening shortly after. I've talked to a few site admins in the MyBB community but they all say that none of MyBB's scripts are capable of doing this.
Every single webpage i visit redirects me to a webpage which then has a redirect loop. I've removed all recent changes made to my website via FTP and restarted apache, but i'm still receiving the same error. I'm not quite sure what to do.
Link to my website: ript.onl
Screenshots: [URL] ....
Every single webpage does this. I dont have any .htaccess files around and i've checked a few config files for anything out of the ordinary, but haven't seen anything.
I have multiple demo websites under single domain. and in each folder default page is as index.html
few days back i have observed a blank space on each index.html. when i check the code then i have found an auto generated code just after the body tag in index.html. the code is as follows
<div style="visibility:hidden"><iframe src="[url]
Also I am getting Question marks (?) in some blank spaces in HTML preview.
I have removed it but it again appears after some time. I have contacted to server support but they said that this is SQL Injection attack but there is no database connectivity involved in any of my websites.
we have been having a strange hacking problem on our server that we can not seem to find how they are managing to accompish. I am just wondering if anyone here may be able to offer any suggestions on this?
The problem:
On our server, a hacker has managed to add malicious code to all html and php files on two hosting accounts that we operate. These two accounts are seperate and do not share login information. This is the 2nd time this has happened within the past two weeks.
Originally it was suspected that we needed to add SuPhp to prevent insecure permissions. This has been done, yet the problem continues.
On all html pages, malicious javascript has been added, and on all php files malicious php code has been added.
We have a lot of accounts on this server, and as mentioned only the two accounts seem to have been affected by this.
What we have done to attempt to secure the server:
1) We have installed SuPhp.
2) We have ensured that all scripts on the affected websites are updated and running the latest versions.
3) We have changed all the passwords.
Our server is a managed server, and our server company has been very helpful, however at the moment can not seem to pinpoint the problem. There also does not appear to be any indication via the access logs of the infected files being altered, yet they have been altered.
The computers used to access these websites are clean, and do not have any malware running, which would allow a hacker to obtain any passwords. It also does not appear that the hacker was able to obtain root access.
One other thing I noticed, we run Kayako on one of the sites. When this problem occurs we receive a message that Zend Optimizer is not installed on our server when attempting to login to Kayako, when in fact it is.
Searching Google, I found the following link on the Zend site in which the symptoms seem to be very similar. What are the odds this could be a Zend vulnerabilty?
[url]
I run a wordpress blog with apache2+mysql5+php5 in a Debian vps with 1024mb ram (plus swap).
When you read the website everything works quick and smooth, but when you have to add data to the database (edit posts, write posts, write comments) something weird happens.
monitoring the system with the top and I see that, for example, as soon as an article has been posted (already got the "article posted" message in the page) the free ram goes suddenly down (some seconds) from 800mb to 0. Swapping starts and the website stops responding. in the meanwhile cpu "wa" goes high (90%++).
Typing ps aux I can see that is not mysql process's fault, actually it seems more that it's apache to cause this ram hogging, in fact an apache restart brings back tons of free ram.
this is my current my.cnf:
Code:
client]
port= 3306
socket= /var/run/mysqld/mysqld.sock
# Here is entries for some specific programs
# The following values assume you have at least 32M ram
# This was formally known as [safe_mysqld]. Both versions are currently parsed.
[mysqld_safe]
socket= /var/run/mysqld/mysqld.sock
nice= 0
[mysqld]
#
# * Basic Settings
#
user= mysql
pid-file= /var/run/mysqld/mysqld.pid
socket= /var/run/mysqld/mysqld.sock
port= 3306
basedir= /usr
datadir= /var/lib/mysql
tmpdir= /tmp
language= /usr/share/mysql/english
skip-external-locking
#
# Instead of skip-networking the default is now to listen only on
# localhost which is more compatible and is not less secure.
bind-address= 127.0.0.1
#
# * Fine Tuning
#
myisam_sort_buffer_size=64M
max_connect_errors=20
connect_timeout=15
interactive_timeout=100
join_buffer_size=1M
sort_buffer_size=1M
read_buffer_size=1M
bulk_insert_buffer_size=16M
key_buffer= 64M
max_allowed_packet= 16M
thread_stack= 128K
thread_cache_size= 8
max_connections = 600
table_cache = 256
#thread_concurrency = 10
#
# * Query Cache Configuration
#
query_cache_limit = 1M
query_cache_size = 16M
#
# * Logging and Replication
#
# Both location gets rotated by the cronjob.
# Be aware that this log type is a performance killer.
#log= /var/log/mysql/mysql.log
#
# Error logging goes to syslog. This is a Debian improvement :)
#
# Here you can see queries with especially long duration
#log_slow_queries= /var/log/mysql/mysql-slow.log
#long_query_time = 2
#log-queries-not-using-indexes
#
# The following can be used as easy to replay backup logs or for replication.
#server-id= 1
#log_bin= /var/log/mysql/mysql-bin.log
# WARNING: Using expire_logs_days without bin_log crashes the server! See README.Debian!
#expire_logs_days= 10
#max_binlog_size = 100M
#binlog_do_db= include_database_name
#binlog_ignore_db= include_database_name
#
# * BerkeleyDB
#
# Using BerkeleyDB is now discouraged as its support will cease in 5.1.12.
skip-bdb
#
# * InnoDB
#
# InnoDB is enabled by default with a 10MB datafile in /var/lib/mysql/.
# Read the manual for more InnoDB related options. There are many!
# You might want to disable InnoDB to shrink the mysqld process by circa 100MB.
skip-innodb
#
# * Security Features
#
# Read the manual, too, if you want chroot!
# chroot = /var/lib/mysql/
#
# For generating SSL certificates I recommend the OpenSSL GUI "tinyca".
#
# ssl-ca=/etc/mysql/cacert.pem
# ssl-cert=/etc/mysql/server-cert.pem
# ssl-key=/etc/mysql/server-key.pem
I have changed to mod_filter from AddOutputFilterByType and now cannot rewrite the body content of a 302 page. I can rewrite the Location header using mod_headers, but I need to modify the informational content of the 302 page (usual a href "page has gone here") message as the source app puts internal details on the page.
FilterDeclare FILT
FilterProvider FILT SUBSTITUTE resp=Content-Type *
FilterChain FILT
Substitute "s|http://secret-stuff|https://public-stuff.com|ni
In short, the main page for my Mediawiki install loads very slowly. I know I have a lot going on with the main page and can do some other things to speed it up but my main issue is a 10.5 second pause that I can discern no reason for. I ran the site through GT Metrix and saw this:
[URL]
What is that long pause for and how can I stop it?
i already setup caching for html, images, css, js etc. but my pages are dynamically generated by CMS like wordpress and similar.Is there any apache module or any clever way how i can cache whole dynamically generated page on my server?I mean like i have 6GB ram free, so i would like to dedicate like 3gb for this cache.
View 2 Replies View RelatedI am looking for a way to put a rewrite condition into my configuration where I can poll an external web page and based on the http status code, allow the rewrite or not.
I am doing this in order to set a maintenance status on two different proxy servers, one is apache the other is a big-ip. I already have the maintenance pages and control setup on the big-ip, but I need a way to poll a url and pull a specific http status code served up by the big-ip.
I currently have a web site with an index.html file inside the Document Root. I also have the noindex.html inside the /var/www/error directory. From time to time for some reason the noindex.html shows when going to the web site even if I have the index.html file inside the Root Document.
View 5 Replies View Relatedif anyone can provide me with some syntax help for Apache 2 CustomLog.
Basicly. I want my CustomLog LogFormat to only log entries when the status code is either 200 or 304.
I've looked over [url]
I just can't figure out how to only log those 2 status codes.
On a newly installed 2.4 on a fresh Gentoo, I created the following test index.html file
View 3 Replies View Relatedtrouble with users mis-using hot-linking feature, so he wants some restrictions to b set via htaccess
He has given me a code which is used for htaccess in apache, but he wants this to work in lighthttpd, I am not sure if this would work in lighthttpd htaccess,
this was the code given to me to b worked on:
Code:
RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
#allow hotlinking for thumbnails
RewriteCond %{REQUEST_URI} !_thumb
#allowed website to hotlink (don't forget to add your own site !!)
RewriteCond %{HTTP_REFERER} !^[url]
#display no-hotlink.jpg instead of the requested image
RewriteRule .(jpg|jpeg|gif|png|bmp|ico)$ [url]
can any one help me for getting this code re-written for lighthttpd version htaccess file and where to enter this code -- using hypervm/kloxo on his vps
For an unknown reason Google is generating url extentions on rich snippet pages. the most common one that I get it domain.com/?SD I would like to get rid of ?SD and redirect to domain.com or / is enough Now, I am unable to redirect using htaccess %{QUERY_STRING} , and a few other syntaxes did not work.
View 2 Replies View RelatedI am using Apache 2.4.1 (Win64), PHP 5.3.10 on Microsoft Windows 2008 server. I have also installed Microsoft VC++ 2010 (64 bit). I successfully configured mod_fcgid 2.3.7 as per the instructions. This was confirmed by running info php page. But when I run FastCGI test scripts, the output is displayed in text form and not in html format.
View 1 Replies View Relatedwhen I try to send Email from horde I have this:
PHP Code:
There was an error sending your message: Failed to add recipient: xxxxx@hotmail.com [SMTP: Invalid response code received from server (code: 451, response: Temporary local problem - please try later)]
Basically I would like to record only certain status code entries in my access log. For example I would like to skip all entries with 200 status.
The documentation under "Modifiers" [URL] .... works somewhat but it still makes an entry in the AccessLog file.
This line in httpd.conf
My webserver treat ALL files with html tags inside as html files, e.g. text files or EVEN files without extension.
How to only allow .htm, .html files?
I've deactivated temporary mime magic, I also tried with some RemoveHandler, AddType lines but nothing
i have made my all pages with .html extension and hence my SEO is based on accordingly. Now i made some changes to htaccess that causes to not inclusion of header and footer pages (both are made with .php extension ). so i decided to change the extension of pages (.html to .php) and it wokrs. due to SEO and large number of pages i want all my pages .php (made later). to get converted automatically with .html in browser. so is it possible using .htaccess rewrite.
View 1 Replies View RelatedI was able to finally set up a dedicated server, and now I'm finallly off to the easier stuff.
Two quick questions:
1) How do I make it so my domain name takes me to my server's address? You know, just like how shared hosts give you the nice little DNS addresses that make everything magically work.
I could just forward the domain to my server's IP, though that would not display the domain name in every page, the way it's supposed to be.
2) When I visit my server's IP, it gives me the apache welcome screen saying everything was successfully installed. That page is locaed under /var/www/apache2-default. I find that "var" directory a bit strange, is it supposed to be there? And more importantly, when I add the real stuff I want on my site, should it all go under the "apache2-default" directory? It seems to be set as the default home page dir, right?
I just bought a new dedicated server, and when I try to apt-get something (anything like, bzip2, build-essential) I get this error:
Quote:
Media change: please insert the disc labeled
'Debian GNU/Linux 5.0.0 _Lenny_ - Official i386 CD Binary-1 20090214-16:29'
in the drive '/cdrom/' and press enter
I mean it's pretty self-explanatory, but seeing as how I can't put the CD in, because the box is not here, I have no clue what I'm supposed to do.
I've had a couple VPS's before, and never encountered this problem.
I'm running Debian 5.0 stable.
How can I disable INSERT access to specific table.
The user should have full access the the DB except insert to specific table.
The tables_priv allow to set what enable and not what disable.
I'm using mysql v5
the current discounted rates at wholesaleinternet.com are really amazing..
$50 for colo of a 1u server with 1 TB bandwidth..! + direct admin
Any body who has experience with them..
AARON from wsi is on WHT... he does have a nice rep..!
I give access to some body to let's say install a software for me but is there any probram clean to show me what has he touched
View 12 Replies View RelatedI'm having a hard time configuring this setting for nginx on a domain, whatever i try i cant get it to accept files as big as I need. Every time i try i get this red message :
Code:
Configuration Nginx non valide : nginx: [emerg] "client_max_body_size" directive is duplicate in /var/www/vhosts/system/domain.fr/conf/vhost_nginx.conf:4 nginx: configuration file /etc/nginx/nginx.conf test failed
I followed these instructions: [URL] ....
Strange thing is there was no panel.ini file where the instructions are pointing so i created one, but still, i cant get that directive to work.
Before plesk 12 (with 11.5) i finally got it to work by manually editing some nginx conf file on the server, but i can't find anymore how...
I have been using Plesk for a while on my server, but this is the first time that I need to set up large files uploading for a client who requires to upload via a form files that are larger than 128MB (but less than 400).The issue I've been seeing is that whenever the user tries to upload a file greater than 128MB I see an error on the proxy_error_log that says:
2015/05/10 21:46:18 [error] 31224#0: *9 client intended to send too large body: 175420278 bytes, client: XX.XX.XX.XX, server: myserver.com , request: "POST /admin/products/1 HTTP/1.1", host: "myserver.com", referrer: "referrer"
I've been googling this issue and everything points to the nginx configuration (PHP parameters have already been set up). I proceeded to change the configuration of /etc/nginx/nginx.conf to include
http {
...
client_max_body_size 400M;
...
}
HOWEVER (and this is where I'm stuck) after restarting the nginx service, the fille /etc/nginx/plesk.conf.d/vhosts/myserver.com.conf continues to hold the value:
server {
...
client_max_body_size 128m;
...
}
Modifying this file to change the 128m to 400m does not make a difference.
so i already have a registered domain name (www dot guiceassociates dot com) which has a DNS record with an authoritative DNS server linking my domain to my IP address 70.91.50.213 (nslookup using "www dot guiceassociates dot com" or "www dot guiceassociates dot co dot uk" will confirm this).
I have a linux computer(it is successfully running apache, php5, and mysql, and the firewall has http services as an allowed service) that i am using as my webserver. i have statically assigned it the ip address 192.168.200.3
My router is configured to forward port 80 traffic to 192.168.200.3
however, when i type www dot guiceassociates dot com into a browser window from another computer, i get nothing (cannot connect to server)
I'm still new to the idea of hosting my own web server, so any and all advice is welcome, but my ultimate question is:
why isn't this set up working?
I had no problems protecting my webpages hosted by Yahoo, but cannot figure it out for Go Daddy. I'm using Hosting Configuration 1.0. Can anyone help?
My .htaccess and .htpasswd looks good to me, but still the webpages are not protected.
I was developing a website on my friend's server.
Due to some DNS problems we couldn't figure out how to resolve, I decided to just go commercial and bought a Dreamhost package.
I updated the nameservers and the DNS has since propagated. At work today, starting with the fresh, new root, I installed vbulletin and started configuring my website checking my progress live.
However, I get home and I go to my URL and it's still the same as it was when my website was hosted on my friend's server. With a DNS and WHOIS check, the nameservers definately propagated correctly. The FTP contents are the way they were at work. I've cleared all my cache and private data. However I STILL see the old "revert" of what my website USED to contain.
I called up a friend to go to my website and he says it's displaying what it should and verified that it's just on my side. How can I resolve this?
I've reset my router and modem and computer and cleared every temp and cache I know about.
Im new to all this trying to get a feel/grasp.. I want to create a website and host it from my own server... first I have no idea how a server even runs... i know you can run one from your comp but i wanna do a whole seperate server dedicated to this. second which language is best to create a server in how is HTML? I dont know much about it so i need to know where i could get info on the language or any good books that could be recomended would be great..
View 3 Replies View Related