I'm still searching other fields, but both columns you mention are clean; if that was the problem, though, wouldn't that cause authentication to fail across the board, not just in webmail?
-Simon -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Rogers Sent: Friday, August 08, 2008 11:29 AM To: [email protected] Subject: Re: [IMail Forum] Webmail stopped working - eek! You might have been hit by a SQL injector attack. I was hit again last night and have spent the morning cleaning up the mess. Look for <script> tags inside your Imail database. The injector changes the userdir and mailaddr fields in my Imail database, so my users were getting the same authentication error you describe. If you have a web site that is accessible to the world, look through the rest of the database to make sure it hasn't been injected as well. Kevin Simon Dodd wrote: > We're having an issue with webmail in Imail 8.15. All services except > webmail are working, and there have been no recent updates or changes on > the server. Sometime last night, however, webmail ceased to be > accessible. > > The service indicates that it is started, and visitors to the webmail > page (http://63.134.128.131:8383) using Firefox can get the login > screen, but visitors using IE or Safari get a blank page if it doesn't > just hang interminably on loading. This holds on the local machine, too, > where http://127.0.0.1:8383 gets the same symptoms. That rules out a > firewall issue, and its accessibility in Firefox seems to rule out the > service outright failing to start. > > Even for Firefox users, though, bringing up the page does them no good, > because even having loaded the page, known good usernames and passwords > are rejected with an authentication error. Connecting to the server on > POP3, I can log in with the same credentials, which rules out a problem > with the database server or the connection thereto. I'm assuming, > dubitante, that these are simply different facets of the same problem. > > Restarting the service doesn't help. Restarting the server itself - > twice - doesn't help. Changing the port number doesn't help. Neither the > list archive or Ipswitch's knowledge base seem to have any useful > guidance. If anyone has a solution - or any guidance or thoughts to > offer - I'd appreciate it. > > Regards, > > Simon Dodd, > Hostmaster, > Joink Internet > > E: [EMAIL PROTECTED] > T: +1 (812) 234 5100 x116 > F: +1 (812) 234 5144 > > ------------------------ > "In Critical and baffling situations, it is always best to return to > first principle and simple action" - Sir Winston Churchill > > > To Unsubscribe: http://imailserver.com/support/discussion_list/ > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://imailserver.com/support/kb.html > > > To Unsubscribe: http://imailserver.com/support/discussion_list/ List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://imailserver.com/support/kb.html No virus found in this incoming message. Checked by AVG. Version: 8.0.100 / Virus Database: 270.5.12/1595 - Release Date: 8/6/2008 8:23 AM To Unsubscribe: http://imailserver.com/support/discussion_list/ List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://imailserver.com/support/kb.html
