My Shared Hosting Mod_security Issue And Drupal
Sep 29, 2009My shared hosting refuses to disable mod security
I have right now problem with my drupal
my IP gets banned again and again
how can I disable mod security for my own domain?
My shared hosting refuses to disable mod security
I have right now problem with my drupal
my IP gets banned again and again
how can I disable mod security for my own domain?
Is there a reputable, shared web-hosting plan on Windows platform IIS6, Drupal 6, PHP 5.2.6 (or higher), MYSQL 5 (or higher) available?
View 8 Replies View RelatedI've made a Social Networking site based on Drupal and I'm now looking for a place to host it. My budget is of 100$ and i'm thinking of buying a premium hosting plan or vps or maybe even a dedicated (if the budget allows) for 1 month, in order to see if the site will have any success. The hosting company must have an option of upgrading the hosting plan so the site's growth will not be limited.
An other alternative would be bluehost but from what I've read they are a total rip-off.
My special requirements are: php5, mod_rewrite and imagemagick installed, SPF domain records or any other method to avoid the email going into the spam folder. mhash and mcrypt are a bonus but not a must.
Anyone can suggest me a truly professional hosting solution for my needs? I don't want the months spent into developing the site gone to waste because of a bad hosting company that suddenly decides they want to suspend my account.
I just purchased a site yesterday that uses runs Drupal and uses 75 gigs bandwidth a month and gets around 3800 visitors a day.
Was looking for something that could handle this type of traffic without spending a fortune on a dedicated.
I own a portal which is heavy on photo, video and audio. My developers have just switched the language from asp.net to drupal.
Can someone help me the ideal server strenghth for such a site. we presently have approx 20000 Images and 3500 Video and 3000 Audio. We have 12000+ members as of now without a single rupww spent on promotions.
We would be now doing a SEO / SEM / SMO and mailers internationally. We expect the numbers to grow atleast 4 folds with a few months
I'm trying to find at least three web hosting companies to choose from to host a Joomla websites on a shared server. Would consider dedicated if the deal was right. I have a friend of mine who wants to create a church website, and is looking for the best deal. I use Netfirms which I have never had an issue with, but I didn't want to be bias, and would like give him other options to choose from.
Is there a good WebHosting Review site, I could check out, or maybe someone could recommend their top three. I reading threw the forums here and I noticed there are not that many complaints with Hostgator. Again, I just want to see if there was anything out there better.
This question gets asked a lot in our Helpdesk and I figured I would post our knowledgebase article here to help anyone else wondering the Pros and Cons of Unlimited Domain Shared Hosting vs. Reseller Hosting. If anyone has anything else to add, I appreciate any feedback on how we can improve our KB article.
----------------------------------------------------------------------
Given the present state of shared hosting, many clients may ask "Why would I need a Reseller account if I can host unlimited Addon and Parked domains within a single shared hosting account?". There is certainly enough Disk Space and Bandwidth provided in many of today's hosting packages, so why bother to purchase a Reseller account?
Many don't realize the drawbacks of hosting large numbers of domains within a single hosting account until they've already packed tens of them onto a single package.
So how do you know whether a Reseller account or Shared Hosting account is right for you? The answer is in how you plan to provide access to others and how "mission-critical" the sites are. You should consider the following factors when deciding on hosting a large number of domains:
1. Who will be managing these sites?
2. How important is site security between sites?
3. Will these domains need dedicated SSLs?
4. How resource intensive will these sites be (RAM, CPU, MySQL)?
In a nutshell, Reseller plans are for those who wish to host websites for other sub-clients and a shared hosting package is for a single individual managing multiple personal domains. We'll go over the 4 points above in greater detail.
1. Who will be managing these site?
If you personally own multiple domains and wish to host them within the same hosting space, you can easily do so with an Addon or Parked domain. An addon domain will allow you to host a new domain within a subdirectory of your hosting space. A parked domain will allow you to have multiple domain names point to the same content. Since addon domains reside within the same user space as your main domain, you can manage all of your domains with a single login. You can see the problem if you want to provide another user with access. Since all accounts are managed with a single set of login credentials, if you give another user access to their addon domain you are also giving them access to your main domain. If you have vital information stored on your main domain and you are hosting another domain as an addon domain for someone else, you cannot provide them access to their hosting without compromising the integrity of your main domain.
When hosting sites as a Reseller, your clients in turn will want access to their account and will want exclusive rights to their disk space and server resources. With a Reseller account, each sub-account you create gets its own username, password, and isolated user space on the server. Individual clients of yours have access to their user space and their user space alone. In addition to the isolation with regards to access concerns, each account also gets their own cPanel access. All of the same great features that you use to manage your sites can also be given to your clients. Next time client Y wants to add an email account, you don't have to do it for them for fear of giving them access to your cPanel, you can simply give them their login details and they can manage their own email accounts.
2. How important is site security between sites?
This is along the same lines as point 1. This is not necessarily related to who you are hosting for, but what content you are hosting. Imagine that you are a webmaster and you are hosting your own personal site-in-a-box community forums (such as PHPBB or vBulliten) on your main domain and a company website for a paying client on an addon domain. It is not uncommon for popular scripts to have security flaws in older versions. Script authors will often update security flaws in later versions of their software. For this reason, it is very important to keep scripts up to date on your site. But let's assume you forget to update your scripts for a couple of months and an unscrupulous individual takes advantage of a well known security hole. Using this exploit, they gain access to your forums and any subdirectories. Since you are hosting another domain as an addon, they now have access to this domain's content as well. A site defacement on this company's site may not bode well for you when they are considering you for web master services in the future.
If these two domains had been separate into two individual users (i.e. two subaccounts created through a Reseller), their content would've been inherently isolated server side by Linux's user management. Sure, your forums still would've been affected by the security hole, but the break-in would've been isolated to your site alone.
Going back to our example, let's say that instead of a corporate website as an addon domain you are hosting an image gallery site for all of your cats. In this case, it may not be a big deal if a compromise in your main domain spreads to your addon domain. After all, they are both owned by you and you're only losing some time and effort to restore these sites from your local backups (which I'm sure you've actively maintained ). But then again, you are losing time and time is money. If these sites had been separated into individual users, again, you'd only have to restore one site's content.
The idea here is isolation. Reseller plans provide you with the peace of mind to know that if one of your users doesn't keep up with their site's content as actively as they should, their actions won't negatively impact the content hosted on other domains. If you and those you host in your addons are diligent webmasters, maybe this point won't have much bearing on your decision. Only you can say for sure.
3. Will these domains need SSLs?
As of this writing, SSL certificates must have a dedicated IP address to be installed. If you are hosting multiple domains on the same shared hosting package, you can still install an SSL (or purchase a dedicated IP address and install one) but you are limited to exactly one SSL on your account. If you are hosting multiple domains on the same package (and consequently the same IP), you must choose which domains gets to have the dedicated SSL.
Sub accounts of Resellers can each be placed onto separate IP addresses and, as a result, can each have their own dedicated SSL installed.
Of course, both shared accounts and Resellers' sub accounts can use the server's shared SSL free of charge. However, some clients prefer to see their domain in the URL bar when they visit https.
4. How resource intensive will these sites be (RAM, CPU, MySQL)?
We've already established that disk space and bandwidth will be no problem. But what about CPU, RAM, and MySQL resources?
It's important to be aware of the resource needs of your website. As administrators, we have to make sure all users "play nice" on the server. We can't have user X eating all of the CPU cycles computing pi to the trillionth decimal place while you are trying to serve web pages to your loyal visitors. We have to monitor the actions of all of our users and in the event someone is stepping beyond the bounds of acceptable resource consumption, we have to take action. In most cases, this entails disabling the abusive script, but in extreme cases we have to suspend the abusive user account to prevent other domains from encountering performance degradation on their sites.
If you are hosting 100 domains as addon domains, all serving nothing but static HTML pages, maybe you will stay off the radar.
But considering most sites are more complicated than static HTML, you may want to be aware of how many sites you host as addons and what content they serve. If you're hosting the latest and greatest Joomla modules, with up to date news feeds, integrated forums modules, polls, blog posts, etc your site can certainly require a degree of CPU to serve your pages. Now imagine you have 5 or 10 of these sites all hosted as addon domains. The resources these sites need to generate their content can quickly add up and before you know it you've got a friendly email from Acenet, Inc. in your inbox wondering why your user is consuming 2 of the 8 CPU cores on the server. That may be an exaggeration, but you get the idea. In the event your resource usage becomes so excessive that we have to suspend your user, now all of your sites are down instead of whichever one may be the direct cause of the spike in CPU, RAM, or MySQL consumption.
If each of these had been separate Reseller accounts, the offending account could've been suspended temporarily while we work through the cause, leaving the rest of your domains live and kicking.
The conclusion here is that you need to be aware of the needs of your sites in a general sense. Hosting unlimited domains within a shared hosting space is certainly a nice feature. For those webmasters who have multiple presences on the web, it's very convenient to be able to manage all of their personal domains from a single control panel. For those entrepreneurs who are hosting multiple domains for other individuals, the features and security associated with a Reseller plan and the inherent isolation of Linux users is a must have.
----------------------------------------------------------------------
I'have a problem with my aps setup on sanbox.When i create on customer ccp when i click finish i have this error. I must only test.
Error: Instance of application with id 124 and version '1-4' can not be provided: There is no resource of class 'Shared hosting Apache' with provisioning attributes 'Web Cluster' in subscription with id 1.:There is no resource of class 'Physical hosting (IIS)' with provisioning attributes 'Web Cluster' in subscription with id 1..If i add the shared hosting apache resourse i get this error : There are no "apache" services that satisfy given attributes: "Web Cluster".
I am developing a website for a client of mine (the client is a close friend and know's that he is getting a newbie). This site will be larger (project wise) than anything that I have ever done (everything I have done in the past has been FrontPage). We will be using several third party applications that need to run on the server as well as our own custom developed applications. We do not yet know how much access to the server's deeper structures we will need for all of the applications that we want loaded on our server to run. Things we have in mind: oscommerce, mysql, php5, apache, linux, vbulletin, blogger, phpbb, adserver, ect... Would these things run ok on a shared host and would I have full authority to configure them without needing full access to the server? Or will I need access to the entire server (dedicated server) in order to have full customization capabilities? I guess all I am trying to figure out at this point is will shared hosting for a large project limit our abilities to use 3rd party apps, or do most 3rd party application designers build their stuff to work in a shared hosting environment anyway? If we need to get a dedicated server we will, but if we can get away with shared hosting for a while (especially during development when the site will not be generating revenue) it would be nice to avoid the price of a dedicated server. Many thanks for your comments, insight, and expertise! Also, if anyone can sight some common scenarios that may require a dedicated server over a shared hosting plan, that may help me to understand what the limitations of a shared hosting plan vs. a deicated or virtual dedicated server are.
View 2 Replies View RelatedHere is my dilemma, thanks to a thread in these forums I was directed to a hosting website called pc-core.net and I was interested in using them, because it does not appear that they oversell at all. My question is regarding the fact that they have the shared hosting for $12/month with ~5gb of disk space and 50gb of transfer. I then just looked at reseller hosting for the heck of it, and noticed i could get a reseller hosting account with 45gb storage and 450gb of bandwidth for $10/month. Even though I wont be selling hosting, or anything like that, can I use a reseller hosting account like a normal shared hosting account?...just with more space and bandwidth?
View 3 Replies View RelatedI'm new to the VPS scene, so could someone tell me the difference between VPS and say shared hosting or dedicated hosting? Actually I really like to know what a Virtual Private Server actually is.. I know shared hosting is typically a single account on a server with several hundred other accounts which is used primarily for the sole purpose of hosting websites, and I know that dedicated hosting is functionally the same as colo except that you rent the server, instead of having your own purchased server plugged into some network. So what is VPS?
View 3 Replies View RelatedDo website builders generally go with shared hosting or dedicated server? I mean, if they work on several websites would they get a dedicated server instead of shared? From what I understand through reading shared hosting is basically if you only have one website. So one with multiple websites would go with a dedicated server?
View 12 Replies View RelatedI would like to know the different between the shared hosting and reseller hosting?
View 7 Replies View RelatedOf the many sites I have, I have one hosted at Bluehost. In the beginning I was very sattisfied and happy. Lately due to workload and stuff, I changed the sites scripts into Drupal.
This seems in retrospect a bad choice because I get CPU exceeds suddenly. Now because I was new to Drupal I thought it was mistake. But with caching enabled agressivly, a minimum of mods enabled and FastCGI on there are still reports of CPU exceeds. This is something which ticks me of. Google Analytics says (I have hosting stats disabled) I get about 300 unique visitors per day.
So the real question is, whats suxors the most. Drupal or Bluehost? Bluehost says Drupal is a falty script made up of bad coding...
I find 300 visitors per day a little low to move to a VPS host. So my question is, is there another host where I can host my site(s) that has equal settings as Bluehost?
I'm adding a drupal site of my own to my other sites. Any suggestions for good drupal hosting?
I don't envision my site as heavy traffic (mostly for my classes and students) but I know drupal has some heavy demands for sql queries and I would like to make sure the site is pretty fast. I'm building a test site on my ASO account, and response time seems pretty slow.
I'm developing two Drupal websites and now looking for a host. I have never used Drupal before, and all my hosting experiences are with shared hosting. Since I have read lately a lot about problems with performance of Drupal sites on various shared hosts, I decided to look for a VPS. Managed, since I don't have skills to manage it by myself. From what I read I have concluded that for one low-mid traffic Drupal site with few modules active, I'll need 200-250MB RAM. How much will I need for two websites on same VPS? Double? Should I use one Drupal installation for both sites? Does that mean I don't need double amount of RAM?
View 4 Replies View RelatedI 'm new user of LSN Dedicated server.
I have instal image sharing web and run well. But when i install my drupal site, my DS give me some error with that CMS.
1. First time, when i'v tried to open it, but browser always ask me to download it.
2. And then i've tried to change .htaccess and remove about addhandler, i can load my web. But not well. The page displayed just cache page. if i tried other page, just blank displayed no html or php tag displayed at source.
config my server? I think there is something wrong with my apache and/or PHP configuration.
I have Drupal setup for one domain on my VPS, and it is the only domain I have.
However, I don't use it that much, and I want to purchase another domain for just a small personal site.
I want to run this on WordPress because I am happier with the simplicity that WordPress offers.
However, I want to do this on the same VPS.
Installing WordPress is no issue, but beyond that, I am screwed!
I have no idea what to do as far as multiple sites go, and it took me forever to get the settings right on my Drupal site, but I have read that it is possible to setup separate sites on the same VPS. But reading about it, and finding information about how to do it has not worked out; I'm not exactly sure what to search for on Google, and most guides give directions on using control panels I don't have access to.
I want the drupal site to still be blah.com and then the WordPress.com site to be whatever.com, and I want them to run on the same VPS. I need them to be separate. One person asked the same question on this forum, and I think he got an answer that was how to point a different domain to the same VPS, but again, these will act as completely SEPARATE sites.
Any help, guides, resources that you fine members of WHT could provide would be greatly appreciated. I can get dirty in the command line (although I still am new to all this networking stuff), but if I had someone point me in the right direction, I should be able to get it done.
I know how to point the domain to the VPS' DNS, but beyond that, I am completely lost, and I could use some help.
I have a Drupal based website which allows comments on posts after validating through CAPTCHA.
Someone has been using a robot to bypass Image CAPTCHA and spam my site by posting hundreds of comments each day.
I use Google Analytics and Statcounter counters on my site. But I haven't been able to find spammer's IP address from visitor logs as the spammer comes directly to my site without any referral. Is there a way to find spammer's IP address and block it in the .HTACCESS file?
I don't think I can stop the spammer just by applying CAPTCHA on comments.
How long do you wait before moving from shared to VPS or dedicated? Apart from security and speed, what are the benefits of dedicated hosting? This says [url] that shared is better than dedicated because you have to do less..
View 14 Replies View Relatedi've a problem with my SMTP settings.The strange thing is that my drupal site, which is located on the server can send mails. But when i try to send from Gmail it does not work.
SMTP-Settings on Gmail
Server: IP-Adress/ or Domainname
Port: 25
User: E-Mail adress
and password
I've also tryed several combinations, it still does nothing.Gmail is showing that it has send the Mail but after a few hours it arrives an email that says:
Action: failed
Status: 4.3.0
Diagnostic-Code: X-Postfix; local data error while talking to
smtp.mailchannels.net[54.214.
243.124]
how to enable clean url (mod_rewrite) with Plesk and Website with Drupal 7 ?
View 1 Replies View RelatedMy server is a debian 7 64 bits with plesk 12 last update.
A customer installed drupal 7.4 from plesk panel successful. However from Drupal/Configuration admin panel can not enable "Clean url". Clean test url failed too:
"The clean URL test failed"
.htaccess was ok .
I tried set domain vhost.con with (https://www.drupal.org/getting-started/clean-urls#enabling-7):
<IfModule mod_rewrite.c>
RewriteEngine on
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_URI} !=/favicon.ico
RewriteRule ^ index.php [L]
</IfModule>
But it not worked (IApache have module rewrite loaded.)
I think maybe issue y for nginx. But I don't know how set this -> [URL] .... in nginx.conf of domain in plesk.
How to set clean url of Drupal in Plesk 12?
I have visited a website ( i dont remember the address or its name) which had some tools to check stuff like the whois of the domain, the location of an ip etc.
Also it had a tool where you have your servers ip, and if the ip had several sites on it (shared hosting enviroment) it would make a list of all the sites with that ip....
where I can find that tool or something like that?
I am thinking about moving hosts and I have some RapidSSL SSL Certificates and PositiveSSL (Free from Namecheap) SSL Certificates
I was wondering can I get these moved over to the new host, if I could bring the SSL Certificates without having to have either get a re-issue of the SSL Certificate or buy new ssl Certificates.
I still have the CSR, Private Key from WHM/cPanel and I would be moving to another WHM/cPanel shared hosting account
I have decided to change my current webhost. Recently I have started seeing a lot of downtime. For a long time I was thinking about moving to a VPS. Unfortunately, I don't have any experience managing one. But I am willing to take any hardship to learn setting up and managing a VPS. The main set back here is that my budget is (very) limited (max $12/month). I have seen some hosts offering VPS for rates that are within the above budget.
Can you plz suggest which is better for me? Shared or VPS?
I own about 10 websites presently, but the number is going to increase as I am planning to take web designing seriously. But none of them are high traffic, infact my current monthly traffic is only 15-20GB.
What I want is a host that provide somewhat good customer support ( support ticket system that gets responded within an hour is fine with me), good uptime and allow me to host multiple domains hassle free.
I have been using a shared hosting. My current host has had some unreliable services from time to time in the past. Lately, the primary reason for my decision to leave my current host is that few (or more than few) of my paid subscribers and non-paid visitors said that my website has been down for some time or for weeks or more even *after* they were able to view the site; however, it IS up and running fine for the majority of the users and myself.
What are the possible reasons for being able to view the site for a while but then later find the site down to a few users for weeks or more but the site is up and running fine for most of other people and myself? The "down" shouldn't be "selective" to some people.
Before leaving the current host, I need to know why it happens so that I can choose the right host and the right plan (and shared hosting vs VPS).
About two months ago, my site was hosted on a shared server. I had no problems on a shared server, but I felt like trying something new, so I switched over to a VPS. Right now I have a plan that offers 384MB RAM, 150GB bandwidth, and 15GB disk space. I do monitor my resources, and I'm finding out that I'm hardly using any RAM at all. I check the System Usage meter a couple times a day, and it's always at 100%. My CPU usage levels reach 10% at most.
Should I stick with this VPS or downgrade to a smaller plan? I'm obviously not using up all my resources, so I think it's kind of a waste to fork out $40/month for something I'm not completely using. I'm unsure on whether or not I should go for a smaller VPS or a shared server. I mostly want to lower my budget to a maximum of $20/month. If I do go to a smaller VPS, I would need managed services. For a shared server, I would need at least 100GB of bandwidth, PHP5, and SSH.
I am leaning towards going back to a shared server, but I would like some second opinions.
I am considering going for a VPS after lurker here for a while. I currently have 2 shared hosting reseller accounts that are really outdated. I need to upgrade but didn't know which way to turn.
I only host my own sites at present but might start niche webhosting in the future. I feel I should move to to vps but still dont know why. I guess I dont want to get let behind with technology.
I have around $40 a month to spend, any help would be great.
As you know, many HP like dreamhost, bluehost, ipowerweb, hostgator, 5site, brinkster, netfirms.
So, i wonder that is there a rank try to sort these HP order by speed, support, and all over.
I had been used dreamhost and thinking they are the best shared hosting.
I'm also looking for a ranking in shared hosting but dont know where to find, can you tell me?
I built a web hosting server, the following is its state
Cent os 5
AMP server loaded updated (installed it as a complete suite during installation so it was all set to go with php mysql modules loaded)
webmin
usermin virtualmin
created 2 named based hosts.
now when i load up wordpress in a site and try to run install.php
the following pops up
"Sorry, I can't write to the directory. You'll have to either change the permissions on your WordPress directory or create your wp-config.php manually."
I had this issue before and research said to redo the entire server (tried everything and was fed up had fedora then"
you can have a look at www.itgrunts.com just click create config file and the errror pops up.
The php and mysql db work great on simple scripts but i dont know why this happens.
i worked with assigning the users and apache user to the directory and everything, no joy.