Erik Haagensen erik.haa at gmail.com writes:
Our site has been hacked several times during the last month.
It has been cleaned and checked by Site Analyzer - all ok.
After some days we have problems again.
The index.php (and several other files) contains this now:
?php include
in pmwiki. Just a quick look at the code
and I don't see any obvious ones.
On Wed, 3 Sep 2008, Erik Haagensen wrote:
Our site has been hacked several times during the last month.
It has been cleaned and checked by Site Analyzer - all ok.
After some days we have problems again.
The index.php
Peter Bowers pbowers at pobox.com writes:
I know I should be able to find out HOW you did this, but after some
time googling I'm not finding anything.
Could someone tell me what variable needs to be changed or what page
needs to be modified to put the message about what password to enter
I was in such a hurry to get the site up and going again that I just made an
overwrite on the pmwiki.php and index.phh from my backup files.
After that the site worked well and we could not detect any problems.
In pmwiki.php it was inserted iframe src='http://klinoneshoes.info/'
width='1'
- partly because of my little knowledge
about this - partly because of their attitude.
Anyone that has an idea about this problem ?
I've run the Site Analyzer and the only thing that came up was that
?action=diag ... enabled
No other vulnerabilities.
--
mvh
Erik Haagensen
Oslia
NO-2550
this destination ?
In the skin.tmpl file.
There is a line like:
div id='wikilogo'a href='{$ScriptUrl}'img src='$PageLogoUrl'
alt='$WikiTitle' border='0' //a/div
--
mvh
Erik Haagensen
Oslia
NO-2550 Os i Østerdalen
tlf: +47 62497332 / 94430332
The site logo is defined by the line:
$PageLogoUrl = $PubDirUrl/skins/image.gif;
in the config.php file.
When I click on this logo I'll be sent to http://www.mysite.no/index.php .
How can I change this destination ?
--
mvh
Erik Haagensen
Oslia
NO-2550 Os i Østerdalen
tlf: +47 62497332
Where can I find (and change) the LINK that is attached to the site logo
in config.php
$PageLogoUrl = $PubDirUrl/skins/image.gif;
--
mvh
Erik Haagensen
Oslia
NO-2550 Os i Østerdalen
tlf: +47 62497332 / 94430332
___
pmwiki-users mailing list
pmwiki
:)
(:input submit value='OK':)
(:input end:)
In your config.php in the /local/ directory add the line
$DefaultPasswords['edit'] = crypt('secretpassword');
Note the %noprint% style comes from my local.css file in the /pub/css/
directory
hope this helps
Simon
2008/5/1 Erik Haagensen
Of *Erik Haagensen
*Sent:* Wednesday, April 30, 2008 9:27 PM
*To:* pmwiki-users@pmichaud.com
*Subject:* [pmwiki-users] InitialPasswords
How can I set a complete site back to Initial passwords as they are at
installation time.
That is: clear all special passwords related to pages, groups
Patrick R. Michaud [EMAIL PROTECTED]:
On Tue, Apr 29, 2008 at 02:21:03PM -0500, Patrick R. Michaud wrote:
On Tue, Apr 29, 2008 at 08:59:50PM +0200, Erik Haagensen wrote:
pmwiki-2.0.12
and I've tried both PHP 4.4.7 and 5.2.5
Both PHP 4.4.7 and 5.2.5 show the bug. (It doesn't appear
flawlessly
(click edit)
Also see http://pmwiki.org/wiki/PmWiki/Security
Simon
2008/4/29 Erik Haagensen [EMAIL PROTECTED]:
I'm administrating a more or less open pmwiki-site.
It's beeing hacked (or whatever the correct expression is) several times
during the last months
How can I set a complete site back to Initial passwords as they are at
installation time.
That is: clear all special passwords related to pages, groups, etc. that
have been added by different users.
--
mvh
Erik Haagensen
Oslia
NO-2550 Os i Østerdalen
I thought about that - but have to admit that I lacked the courage !
Thanks a lot.
2008/4/30 Tegan Dowling [EMAIL PROTECTED]:
On Wed, Apr 30, 2008 at 2:26 PM, Erik Haagensen [EMAIL PROTECTED]
wrote:
How can I set a complete site back to Initial passwords as they are at
installation time
countermeasure that can be taken to try to make it at least a
little more difficult to do this?
I don't know - but I believe that this is done by some automated actions.
--
mvh
Erik Haagensen
Oslia
NO-2550 Os i Østerdalen
___
pmwiki-users mailing list
\nooreg.no\httpdocs\pmwiki.php* on line *876*
*Warning*: Division by zero in *
C:\Inetpub\vhosts\nooreg.no\httpdocs\pmwiki.php* on line *876*
..
Then comes the page which seems all normal !!??
and as a last line:
Error in my_thread_global_end(): 1 threads didn't exit
--
mvh
Erik Haagensen
I tried to put the line
$TableRowIndexMax = 1;
in local/config.php - but it didn't help.
2008/4/29 Erik Haagensen [EMAIL PROTECTED]:
My server-provider has swapped to another server and copied (in one or
another way) my pmwiki-system to the new server
After this swap I get error
pmwiki-2.0.12
and I've tried both PHP 4.4.7 and 5.2.5
2008/4/29 Patrick R. Michaud [EMAIL PROTECTED]:
On Tue, Apr 29, 2008 at 07:15:49PM +0200, Erik Haagensen wrote:
I tried to put the line
$TableRowIndexMax = 1;
in local/config.php - but it didn't help.
What version of PmWiki
18 matches
Mail list logo
