Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: CopagJoe on February 11, 2006, 05:12:56 AM

Title: Rebuild php - How to
Post by: CopagJoe on February 11, 2006, 05:12:56 AM

Somebody caused a rebuild of php on my server this afternoon.
1 - How do I restore/rebuild php?
2 - How do I prevent this?

Please Help!! My site is down.

Title: Re: Rebuild php - How to
Post by: pfloor on February 11, 2006, 10:09:56 AM

Quote from: "CopagJoe"

Somebody caused a rebuild of php on my server this afternoon.
1 - How do I restore/rebuild php?
2 - How do I prevent this?

Please Help!! My site is down.

What exactly do you mean here?  What did they rebuild?  Your website still works but its kind of slow.  

Your server was compramized due to the CRE Loaded 6.15/OScommerce website that you run.  Did you bother to read any of this: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-0478 ? There is a patch available but I'm sure it's too late now.

You will probably need to remove all the PHP scripting and start from scratch with a re-load of your site.  No telling what the attacker erased, changed or added to you site.

P.S. You can't prevent it if you don't keep your machine patched, especially badly written PHP scripts.