Messages

31

Mods & Plugins (Releases & Support) / Re: one more MOD request

« on: September 14, 2007, 03:23:48 PM »

Humm that will welcome every user who is logged in..what I meant was:

1.user registers
2.Gets an email with the activation link
3. Clicks on the link
4. msg shows on the front page:
"Welcome to our newest member:" and then show the name of the person who registered last.

ms

32

Mods & Plugins (Releases & Support) / [MOD] Welcome to our latest member..

« on: September 14, 2007, 01:02:48 PM »

1. on the front page to have: Welcome to our newest member {user_name} of the one who just registered. 

ms

33

Mods & Plugins (Requests & Discussions) / Re: 4Images RSS news in the ACP

« on: September 14, 2007, 04:29:25 AM »

Thank  you guys looking forward to it.
ms

34

Mods & Plugins (Requests & Discussions) / Re: 4Images RSS news in the ACP

« on: September 14, 2007, 01:49:40 AM »

Thanks guys,
I dont have the pleasure of knowing Jan or Kai  but as moderator may be you can post in the mod room about it..we all go to ACP often and will be in touch with latest updates...

BTW I have recovered my site with no trouble just spend some time uploading and deleting stuff. Now I'm all updated to 1.7.4 

ms

35

Mods & Plugins (Requests & Discussions) / 4Images RSS news in the ACP

« on: September 13, 2007, 10:15:32 PM »

I wonder if its a good idea to have a window between "who is online" and "Stats" showing RSS feeds from 4images homepages ?
We can be up to date with the latest patches or updates as well as some important msgs from 4images.

ms

36

Mods & Plugins (Requests & Discussions) / The phpBB integration question ?

« on: September 13, 2007, 06:11:57 PM »

Howdy guys,
one quick question

Will this work

I have 4images with about 1000 members and 500 pics so :

1. install a fresh seccond copy of 4images in different directory.
2. Install phbBB
3. Integrate them using the provided scripts
4. get the backed up database, and templates from the original 4images
5. Use restore database in the seccond copy -> will that update the phpBB database for userlogin or will they now share the user login dabase ?
6. delete the original copy of 4images

thanx.

ms

UPDATE:
======
no go..did not work.

ms

37

Mods & Plugins (Requests & Discussions) / Re: Request: IP logger..

« on: September 12, 2007, 04:56:14 AM »

will it be possible for the script to check if the uploaded file is actually an image of something else that would be something no ? 
ms

38

Mods & Plugins (Requests & Discussions) / Re: Request: IP logger..

« on: September 12, 2007, 04:14:20 AM »

Yea my friend,
the fkr have emptyed the setting and user databases but left one hole..I have deleted the entire directory and uploaded my backed up directory. Then I logged to admin panel. He deleted the account but I menage by using Admin and Admin as accound (lucky guess). From there I restored the databases and voila my site is up and running smootly. You my friend rule..

Now I have big favor for the MOD developers:

I have found a script online which I use to ZIP my entire site if you guys can build it in the Admin panel as Plug In it will be fantastic:

Code: [Select]


<?php 
$emailaddress = "your@email.com"; 
$target = "/home/".get_current_user()."/backup.".date(d).".tar.gz"; 
if (file_exists($target)) unlink($target); 
system("tar --create --preserve --gzip  --file=".$target." ~/public_html ~/mail",$result); 
$size = filesize($target); 
switch ($size) { 
  case ($size>=1048576): $size = round($size/1048576) . " MB"; break; 
  case ($size>=1024);    $size = round($size/1024) . " KB"; break; 
  default:               $size = $size . " bytes"; break; 
} 
$message = "The website backup has been run.\n\n"; 
$message .= "The return code was: " . $result . "\n\n"; 
$message .= "The file path is: " . $target . "\n\n"; 
$message .= "Size of the backup: " . $size . "\n\n"; 
$message .= "Server time of the backup: " . date(" F d h:ia") . "\n\n"; 
mail($emailaddress, "Website Backup Message" , $message, "From: Website <>");  
?>

thats it run it and it will zip the entire public_html dir and make file for you to download. It saved my site and work.

thanx

ms

39

Mods & Plugins (Requests & Discussions) / Re: Request: IP logger..

« on: September 12, 2007, 03:26:04 AM »

For those who might be interested:

I have traced the hacker back to the good ol Matushka Rusia USSR..the user have tried to upload fake img file which had a php embeded in them. I have managed to ban about 5 different entities of that person using the htaccess however I found out that he managed to plaque the site by uploading different shell scripts named: h.php, mohajershell.php,lolek.php and root.php. The h.php was actually a trojan (JS:TrojDnldr-16 ) detected by the Avast software. Then he uploaded a bsh.c script tmp_media directory. There is a lot of other crap all over the directories...

ms

40

Mods & Plugins (Requests & Discussions) / Re: Request: IP logger..

« on: September 12, 2007, 02:36:22 AM »

May be I was not clear : I have no site to fix...I have files there but the f...er deleted random files and stuff from the database...it is useless to fix something which does not work. If I manage to get the site online again I will update the fixes but for now I have no site to fix.

BTW I try to do fresh install of the 4images but I get this error:

"An unexpected error occured. Please try again later."

I have no clue what that is..any idea

ms

41

Mods & Plugins (Requests & Discussions) / Re: Request: IP logger..

« on: September 12, 2007, 01:40:48 AM »

..see i can not open the site

http://www.surgicalpathologyatlas.com/db

how and what to fix there is nothing to fix...I did restore the site from a backup but see its not showing up..

42

Mods & Plugins (Requests & Discussions) / Re: Request: IP logger..

« on: September 12, 2007, 01:33:33 AM »

well I guess its too late...i tryed to restore it however the site gives just a blank page..tried to restore the mySql and I think I messed up things even more...well there it goes 3 f..king years of hard work..700 disease entities with references and over 1000 members..down the drain..man ...why bother finding a new host...
 
ms

PS talk to tech support they said that they can control exploits like that and I have to upgrade my software and keep it up to date. And they are right of course..

ms

43

Mods & Plugins (Requests & Discussions) / Re: Request: IP logger..

« on: September 12, 2007, 12:25:16 AM »

Wow so much damage...why would people do stuff like this...Im not sure how to restore my site..mySQL destroyed, images corrupted..
Im saying come one...its a medical web site for Christ sake...

ms

44

Mods & Plugins (Requests & Discussions) / Re: Request: IP logger..

« on: September 11, 2007, 10:26:25 PM »

Thunderstrike, thnx gazilion times for that MOD.

I will test it tonight. I was working arround the clock to update my 4images however I was too late the site got defaced this morning by someone called br3k ( I hope he/she rots someware  or catch something). I will restore my backups...

I was wondering if there is a way to tell the server which scripts to execute and which not..I mean I was looking at htaccess allow deny to prevent execution of foreign PHP scripts on the server but this is not my thing..
its like creating a white list of file names which are good for execution and denly for the rest.

You guys know anything like that  ?

ms

45

Mods & Plugins (Requests & Discussions) / Request: IP logger..

« on: September 11, 2007, 01:17:52 AM »

Hey guys,
I dont know may be this was done already but: Im using ver. 1.7.1 curantly updating some security fixes. My site was taken down 2 times by hackers (I faltered bid f..ing deal )..and today again i found 2 files by Demon team or crap like this. I also find this pseudo images being uploaded ( PHP files renamed to JPG ). I have installed the ban script and I wanted to ask you if it is possible to do the following:

when logged to the admin control panel --> then edit users and then search --> along with the other fields like ID name email etc..etc. to get all IP addresses for that user. It will be nice to have someway to add a line to htaccess to block these IP addresses.

You think thats a good idea ? or it will clog the database with too may IP addresses..

ms

sorry but these amateurs hackers are getting on my nerve....