Hi I seem to be having a problem with my site. heres some background on what up and running. On
http://www.labradorsonline.com/
XOOPS Version XOOPS 2.4.4
PHP Version 5.2.15
mySQL Version 5.1.52
Server API cgi-fcgi
OS Linux
safe_mode Off
register_globals On
magic_quotes_gpc Off
allow_url_fopen On
fsockopen On
post_max_size 64M
max_input_time 60
output_buffering
max_execution_time 30
memory_limit 64M
file_uploads On
upload_max_filesize 64M
XOOPS License

This site has been hacked 3 time sin 3 months haven't lost use of modules just clears out all topic posts and forums.. I get 10 new memberships daily with fr.@yahoo.fr. I am now doing admin activation only. I have the protector module installed.

Am working with the person who hosts the site for me to check in the data base. Also one member has continually got multiple e-mails about changing his pw for data base. has happened for the last 2 days .

Its a small site I'm green going forward and would just like someone to guide me if you can so I don't lose everything if it happens again. Another site which is xoops based and hosted with mine has also crashed so that is a concern


Should I go forward with these directions on the protector module?


XOOPS_TRUST_PATH' :
Check php files inside TRUST_PATH are private (it must be 404,403 or 500 error
If you can look an image -NG- or the link returns normal page, your XOOPS_TRUST_PATH is not placed properly. The best place for XOOPS_TRUST_PATH is outside of DocumentRoot. If you cannot do that, you have to put .htaccess (DENY FROM ALL) just under XOOPS_TRUST_PATH as the second best way.
'register_globals' : on Not secure
This setting invites a variety of injecting attacks.
If you can put .htaccess, edit or create...

/home/labon/public_html/.htaccess

php_flag register_globals off
'allow_url_fopen' : on Not secure
This setting allows attackers to execute arbitrary scripts on remote servers.
Only administrator can change this option.
If you are an admin, edit php.ini or httpd.conf.
Sample of httpd.conf:
php_admin_flag allow_url_fopen off
Else, claim it to your administrators.
'session.use_trans_sid' : off ok
'XOOPS_DB_PREFIX' : xe82 ok
Go to prefix manager
'mainfile.php' : patched ok
'databasefactory.php' : Your databasefactory is ready for DBLayer Trapping anti-SQL-Injectionok


Being a beginner is mind boggling love this simpleness of the forum and dont want to lose it. Thanks for any direction at all.

Morning
Well we found them... On this particular version of xoops when a member is online you click on the word more below it. It lists who ever is online's IP. No explanation but that works.

Hmm Thank you . I will ask her if she can find that info.

Hi I run a newer version of xoops 2.4 and am trying to help my friend on her site with finding ip address of a member. She runs 2.0.13.1 she says. I tried to find it for her yesterday but its so different from mine . I can drag my mouse over a users name and a drop down menu appears with users profile ,send a pm or ip address
I have that feature turned on and did it form the admin forum preferences . Her older version is not at all like that . Could you help us?
Thank you.

My site is running I can access and change things in admin menu but cannot see or reply to threads in forums. This is the error message you get when you try. "could not insert forum post". Any ideas on what is wrong I cannot figure it out. Trying for two days. Thank you,

My members are having this problem and I am having the same when trying to upload smilies today. Same error message.

Error
Failed to save fileto /home/labon/public_html uploads

It happened in the past and for the life of me I cant remember how I fixed it. Any suggestions? Anything would be helpful. Appreciate the time .

Hi All My site has been great no problems just rolling along well for the last 8 months . I have done this many times and now get this message when trying to submit new smilies Errors Returned While Uploading
Failed to save file to /home/labon/public_html/uploads/smil48a7453fc7289.gif

Can anyone explain this to me I'm just confused Thanks in advance. K.

Thanks for the input yeshttp://www.labradorsonline.com/ is my site. The new version since Jan 08 is 2.2 and the server is hostgator. What Bender has suggested as a problem in the host site for pictures makes sense. I will ask the members who signatures have been effected what host co they are using . With both sites experiencing the same problem I just thought it may be XOOPS related , Thank you for your time.
Karen

I apologize if this is not the correct forum to post. I am having problems on my site with members signature pictures shrinking down to a thumbnail size , smaller or vanish. It happens randomly not to everyone. Also there is another Dog web site that uses XOOPS also and I was told they are having the same problem. I believe we use different versions . I have checked my admin section and see no problems. Members can easily redo them and then its fine. I am just wondering where the problem may be and how can I fix it? Thanks so much for your time or any information . Its greatly appreciated because still this is all so new to me .

Can anyone shed some light on this for us Thanks.