Hi guys, I am hoping someone can help me here, my hosting company has tried to help me but they keep saying that it must be my browser. Its not, as I have tried in firefox and ie on two different computers.


What is happening is, I try to change a page, or even add a whole new page, but they wont show up on the internet.

What is strange is that for instance, I completely deleted the index page and made a new one, but the old one still shows up on the internet! But in cpanel, if I click the edit HTML button, it will show the new page.

Not only that but since this started happening, 5 days ago, my stats are no longer showing. The past 5 days show 0. But my hosting company says that when they go in and look, they can see the stats.

I attached a screen shot of my cpanel file manager, as you can see, there is a page named "graphics"
yet if you go to: http://www.theweekendworker.com/graphics.htm it comes up with a 404 error page!

It is really frustrating, I cannot update, or add anything!
Thanks for the help!

Attached Images

screenshot.png (14.2 KB)

I am writing this post to explain how accounts on server get hacked. Many times it happens that cpanel accounts on server are hacked. Most common hacks are like index page is replaced with some other code thus defacing your website. Some times this types of hacks happen on all accounts including backup on server. Many times it is also an Iframe Hack where hacker puts an extra code to your website and whoever accesses that website, a virus enters their computer thus infecting it. We are not going deep in to the types of hacking but what I am going to explain here is how can we stop this from happening or at least prevent or avoid from happening. If you are facing issue of Iframe hack then one of our cpanel forum member have posted a good article which you can find it here:

http://forums.cpanel.net/f5/solution...tml#post363227

Now one would ask “How does this hacking takes place?” Such defacing hacking takes place and we get victim of it because we are careless or we don’t have basic knowledge of keeping our site secure. It is us who give a way for any hacking to take place. Any hacking which is taking place by browser happens due to weak permissions. Many common php applications we use like a picture gallery, forum etc are start point of hacking if and only if they are insecure or are of older versions or some files or directories of that applications are having weak permissions like 777 or 755. For example I have a application which has option of uploading a file. Now if that uploaded file is going in directory for example “images” and “images” is having 777 permissions. Now if I upload any defacing script using that options to images directory say “deface.php” then I can easily access that script using link:

http://domain.com/images/deface.php

as the images directory is having 777 permissions I can easily execute that script and can deface that account or website. If the permissions on other directories of server are really weak then I can deface the files in other locations of server also. After uploading the script I find more accounts on server who are having weak permissions then I can run my script from its current location and can hack other accounts too. So in this way your account, some other accounts or even whole server is hacked due to weak permissions. To clear this point I have attached a small php script with this post. Just upload it to your account and access it from browser you will see that you can browse other files on server whose permissions are weak.

THIS IS NOT A HACKING SCRIPT AT ALL, NOR I AM PROMOTING HACKING IN ANY WAY. THIS SCRIPT WILL HELP YOU TO FIND OUT WEAKNESS IN YOUR ACCOUNT SECURITY. THIS IS JUST FOR EDUCATIONAL PURPOSE. IF MODERATORS OF THIS FORUM THINK THIS POST IS AGAINST ANY OF THEIR RULES THEY ARE WELCOME TO DELETE THIS POST.

This script is type of browser to browse files on the server or account, where file permissions are weak like 777 or 755 you can browse them though they don’t belong to your account. This script cannot be used to modify or execute any command so don’t worry :)

So in order to stop all such hackings on the server or to your account always be alert on permissions. Many people use 755 or 777 permissions casually thus becoming victim of some hacking today or tomorrow. Secondly always keep your php applications upgraded to their latest versions so that if there is any code or bug in previous versions they will be cleared. This was very short information but if other forum members want to add more to this they are welcome.

I will be adding more security tips in coming days so stay tuned :cool:

Attached Files

webadmin.zip (17.3 KB)

Hi,

We have a customers which want to use mailman over SSL connection. So, it would be good to have this as option in WHM with appropriate link in cpanel.

Thanks

Hello.

Please tell me where cPanel logs API cals?

Thank you

Having a problem here. As we introduce more & more NUMA servers (basically any machine with more than one CPU that is AMD or the new Intel Nehalem) we find that XEN (guests) not being NUMA aware limits us.

So now that KVM in mainline in RH 5.4 we want to look to a move to KVM as the guests have NUMA awareness.

So, if we switch from Xen to KVM, will it break VPS licensing? Is cPanel KVM aware?

I hope so as not being able to use NUMA for a VPS is a long term problem.

Hello,

I was reading and the documentation said that the only input is required of the username,

but when i run the xml with the user and domain $ set, i get this output:

Does that mean the documentation is wrong? or am i missing something

edit: here is link http://twiki.cpanel.net/twiki/bin/vi.../ModifyAccount

I have vps license for cPanel and the problem is when I want to access cPanel via https port eg: domain:2083 it will redirect me to hostname:2083 instead.

Where can I change those setting inside WHM?

Por Favor, quien me puede ayudar a solucionar un problema cuando envio un correo desde Outlook a yahoo.

gracias anticipadas.

Hello, My Enkompass server is not recognizing the MySql service on the same local machine. Also, customers do not see a MySql icon in their Website Owner control panel.

I installed MySql after installing Enkompass. I am using the correct root password. I am able to add the MySql service in the Enkompass Server Manager, but it fails the MySqlService test. ServerConnection and Certificate Tests pass. I also get this error message when I try to manage the MySql service:

Manage MySql Service
Error occurred while installing certificate service. Exception: Failed to install the Certificate Service on 192.168.3.31. Method 'InstallCertificateService' from contract 'IServerAdministratorService' failed.

Any suggestions on how I can get Enkompass to see MySql? Thanks.

Greetings -

I have an odd issue and would appreciate any suggestions. Any time we create a new account through WHM or simply park a domain on top another one, all the websites on thes server (except for WHM - assuming because i'm going through https) freeze. Apache simply stops responding and I am forced to scroll down to http server in WHM and reset it.

Any ideas?