some body attacking on my server and changing my users profile name /password or any other information so How To Protect MySQL Database From My SQL Injection Attacks? i have dedicate server i provide free wap sites to people with wildcard dns system and i have ConfigServer Security & Firewall installed.
View 3 Replieswhat steps procedures need to be done to keep your database as safe as possible from the hackers. Anyway to be alert when someone got into your db and try to dump, alter your database?
View 4 Replies View Relatedi am seeing a lot of Local file inclusion (LFI) and mysql injection attacks quite often directed to php scripts.
what is the way to prevent them? would installing mod_security to apache work?
I see on one server with windows 2k3 and sql 2000 alot of Injection attemts(lucky so far) and 90% come from china.
Is there any way on iis6 to put range ban like 123.52.0.0 - 123.55.255.255 so to ban all that network?
All my sites on both my hosting accounts are infected with an iframe.
At the end of the index.html files the malicious code just appeared...suddenly 3 weeks ago.
The host blamed Joomla so I took the appropriate steps:
Upgraded my Joomla to the latest version, changed the whole account username and password, changed the configuration and template to unwriteable.
It stopped the injection for a few days but then it came back.
I would also like to add that 2 other sites on my account, one simple index.html file and an old website I have that is totally HTML with nothing to do with Joomla also got infected.
The iframe also infected a Drupal install I did as a test.
So according to these fact is this a Hosting Company not taking responsibility or can a Joomla site infected spread to other normal HTML sites and different CMS's on the server?
This situation is ruinning me and I strongly suspect it's a Hosting problem and not Joomla.
Any expert opinions from true professionals would be appreciated because if I can prove that it's not a Joomla issue I might take legal action against the hosting company since this has cost me dozens of hours of work and several hundred dollars of lost revenue.
I am attaching the iframe exploit. It installs itself on every index file...in every folder - components, mambots, ect..additionally it attaches itself on any and every kind of addon that has an index.html file.
I have few scripts, but hackers again upload at some way c99, and hack some SMF forums at server. Server like server they cannot hack, but user account they can. So please tell me what you advice?
View 6 Replies View RelatedCan someone recommended me some one with knowledge of mysql exploit or mysql injection, it seem to our VB forum have issue with database load..
View 5 Replies View Relatedi did make a big message on here but it deleted when i back spaced
my website is aviation cafe dot net / sample and i need you to help me with password protecting a webpage, i wanted the address to be / the silver sword and definitly not to look like it does now.
username: webforum
pass: password
i been trying to move my server.. But mysql database is quite big and restoring takes ages 10 12 hours.. is there anyway i can make it quick because database dump takes 10 15mins but restore takes 12hours and it should be a way to make that quick
View 14 Replies View RelatedI had a non client send me an email about being hacked. apparently the hacker is using a program/command line and is entering this into the db:
user=' &pass1=111-222-1933email@adress.tst&pass2=test&submit=
create%20Account
any way he can patch up his navicat database to stop this?
I've experienced so much hacker attack lately. Hosted wiht hostforweb.com if that makes any difference.
Last issue I have is:
Type of attack: URL Injection -- attempt to inject / load files onto the
server via PHP/CGI vulnerabilities
How I can secure my server against such attacks?
Also I need to resolve this issue ASAP but can not find the file and I don't know what to do.
Report:
Sample log report including date and time stamp:
Request: rosemarythecelticlady.com 64.202.102.218 - - [13/Aug/2007:11:50:03
-0500] GET
/awstats/data/awstats1...marythecelticlady.com.txt/admin/index.php?o=[url]HTTP/1.1 302 228 - libwww-perl/5.808 - -
Request: rosemarythecelticlady.com 64.202.102.218 - - [13/Aug/2007:11:50:04
-0500] GET /admin/index.php?o=[url]HTTP/1.1
302 228 - libwww-perl/5.808 - -
Request: rosemarythecelticlady.com 64.202.102.218 - - [13/Aug/2007:11:50:04
-0500] GET
/awstats/data/admin/index.php?o=[url]
HTTP/1.1 302 228 - libwww-perl/5.808 - -
WHAT NEEDS TO BE DONE HERE and where to located it? Your help is greatly appreciated.
how can i setup rsync to backup just mysql database (if possible) every 6 hours or so.
View 14 Replies View RelatedI have are the .frm, .MYD, .MYI how do I restore/rebuild the database?
View 3 Replies View RelatedMy server admin linked me to this:
[url]
I'm using a cpanel based server, but I can't get this to work.
It requires I be in a directory I figure (this step isnt included)
so I type cd /home/username/public_html/
And then i follow the commands. but it doesnt work.
Basically i need to take a mysql database that I uploaded to my directory, and load it back into a database. :@
I have a problem getting mysql to start, so I am planning to setup a new server and move all the mysql databases to a new server.
The problem is I normally get mysql databases when mysql is running by using mysql command lines. Now that I cannot start mysql, I cannot use that method.
Is there a mysql directory that contains all the mysql databases for me to tar it up and untar it on a different? If there is a directory that contains all the mysql databases, do I need to exclude some files/folders so it doesnt conflict with the files/folders on my new mysql server?
we have whm in my server
in whm is one part to name
Repair Mysql Database
this is only for one database
how may i repaired all database in my server?
I got this weird problem with my VPS which has MySQL 4.1.22 running on it. Everything works fine for sometime and then out of a sudden, it stop recognizing the mysql users and refused to allow my PHP scripts to access the database.
It seems that I needed to restart mySQL server to resolve the issue. Then out of the blues, the same problem occurs.
I am running Cpanel on a VPS and there isn't any overloading as the database access is pretty light on my 512mb VPS.
I contacted my web host about the issue and it seems like all they do is to restart the mySQL. This cannot be a solution as it happens at least once or twice a day depending on how soon I could catch the problem.
All the time this problem occurs, the MYSQL Server is still active and working. I can even access it through PHPMyAdmin but not through the scripts.
I just added an hourly crontab so as to restart the MySQL server as a stop gap.
What is the recommended method of backing up big MySQL database of size 2 GB ?
Quote:
# mysqldump gallery > gallery.sql
mysqldump: Got error: 1017: Can't find file: './gallery/10tir_user_group.frm' (errno: 24) when using LOCK TABLES
#
I checked the table, it is fine, but can't do the backup.
Quote:
mysql> check table 10tir_user_group;
+-------------------------+-------+----------+----------+
| Table | Op | Msg_type | Msg_text |
+-------------------------+-------+----------+----------+
| gallery.10tir_user_group | check | status | OK |
+-------------------------+-------+----------+----------+
1 row in set (0.07 sec)
mysql>
ways to improve the database performance in the situation when I have to modify a large table (several million rows), by e.g. adding a column. Currently this would take several hours which is too slow. The bottleneck is disk I/O. I am considering either partitioning the table over several innodb files on several disks, or going to a RAID-5 or RAID-10, it this will give me better write performance.
The database is 130GB large, and the problem table (which I make period changes to) is the largest table on the server. I cannot have downtime of 3 hours each time I make a change and adding blank fields (to be used later, when a new field is needed) is not an option.
Each time I add a column, the cpu goes into high (80%) io wait state for about 3 hours.
I have a hack which would allow me to split the large table into multiple smaller tables based on some criteria (for example, forumID or such). Here are a couple of things but would like to know which is best, and am open to new ideas. The ideas so far:
1. Split the table into 3 or 5 smaller tables each on it's own disk. The disk IO would then not be so bad, and it might only take 1 hour to perform the table change. But this might not work because the changes to the database (as in adding a column) might be serial, meaning only 1 disk is being written to at a time. (Then again, maybe it will work if I launch 3 different scripts, one to update each table at once).
2. Do RAID 5 or 10, and have 3 or 5 disks. This again might not help at all because of the above issue with MySQL writing serially.
I am using latest MySQL 5.0.45 with InnoDB engine on Debian etch Linux
Which do you recommend for mysql databases alone? around 200 - 300 connections anytime
I have heard that mySQL alone can be better on 64bit environment. How about the hardware?