Jump to content
The mkiv Supra Owners Club

Error message connecting to this site


toyotasuprauk

Recommended Posts

Guest mentalfx

This sounds very familular to me. Last week one if my clients had a simular problem. The server admin needs to check to make sure it's not been compromised, chkrootkit etc.

 

If it's what I think it is then it's a server hijack by an adware/spyware type company. First thing for the site admin to check is the .htaccess file and make sure there's no dodgy code in there redirecting the page. Also make sure "option -Multivew" isn't in .htaccess file. Check the file against a backup copy and also see when the file was last modified and by who.

 

If there's a load of files created by user apache or nobody then the server/site has most likely been compromised.

 

There's so much of this going on, it's mainly because of insecure server scripts or old software that's not been patched to current security levels.

 

Hope I'm wrong cuz it's a real pain in the arse.

 

Duane.

Link to comment
Share on other sites

OK people, I've traced the source of the problem. The server has NOT been hacked.

 

There is some code run by the forum which automatically changes your time between GMT and DST if the option is set in your profile - look for "DST Correction Option". However, the URL used is relative to the forum, but the homepage is a level above this and therefore the relative URL is no longer valid. This is obviously an oversight by the developers of the homepage code and I'll attempt to fix it now.

Link to comment
Share on other sites

This sounds very familular to me. Last week one if my clients had a simular problem. The server admin needs to check to make sure it's not been compromised, chkrootkit etc.

 

If it's what I think it is then it's a server hijack by an adware/spyware type company. First thing for the site admin to check is the .htaccess file and make sure there's no dodgy code in there redirecting the page. Also make sure "option -Multivew" isn't in .htaccess file. Check the file against a backup copy and also see when the file was last modified and by who.

 

If there's a load of files created by user apache or nobody then the server/site has most likely been compromised.

 

There's so much of this going on, it's mainly because of insecure server scripts or old software that's not been patched to current security levels.

 

Hope I'm wrong cuz it's a real pain in the arse.

 

Duane.

 

Um, the server is running Zeus webserver, not apache. It says that on the picture in the first post.

Link to comment
Share on other sites

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue. You might also be interested in our Guidelines, Privacy Policy and Terms of Use.