Tag Info

Hot answers tagged

6

One big server for your case. Reasons: You aren't big enough for more than one physical server. MySQL will have extra latency to communicate with a second server, even if it is only a ms being in the same datacenter. Sharing resources. 2GB of RAM can be fully used by whichever needs it, Apache or MySQL. Otherwise, each is limited to 1GB. Twice the ...


4

You're using mod_php, so Apache is also handling your PHP workloads at the same time. Since PHP needs lots of RAM (well, most like this do, including mod_perl), you'll see higher RAM usage than serving just static files.


4

Some steps to take: I found some info in phpBB's forum, but it was too well hidden for new (forum admin) users: ACP, General, User Registration settings, New member post limit - set to whatever number you want. ACP, General, User Registration settings, Set Newly Registered Users group to default, Yes. Then there's the suggestion to put new new users ...


3

It all depends on how far you need it to scale and in what direction. I'm currently working on a moderately large vBulletin-based site. Some rough numbers: >1000 forums >1.3M threads ~20M posts >300k registered users >50 page views per second at peak There are plenty of bigger forum sites out there, but we're big enough to have run into scaling problems ...


3

Can you determine if any relevant data was stolen? Potentially, yes. If an attacker only used SQL injection and wasn't able to escalate privileges further, odds are that the system logs are still reliable. That may allow you to trace some of the attackers steps. The thing is that for instance by default most web servers do log requested URL's and ...


3

By default SQL express accepts only shared-memory connections. (generally supported by other MSFT products and only works on the local machine) phpBB for obvious reasons connects via TCP/IP. To use it with SQL express you'll need to enable TCP/IP connectivity. Don't bother with Named Pipes, that's not needed. To enable TCP, follow these instructions: ...


3

This would be a job for Fail2Ban. You can use it to scan log files for particular expressions, and block using iptables based on those results. fail2ban should be available in most distribution repositories, though you may have to add in optional repos.


3

Answer found elsewhere (credit: joshhighland.com) run the update manually but use one of the following example hashes; Hash: e10adc3949ba59abbe56e057f20f883e Password: 123456 Hash: $H$9Ae3Uk.ECdWW5ya13M4ErWhr4c.761/ Password: password e.g. mysql> update phpbb_users set user_password='e10adc3949ba59abbe56e057f20f883e' where username = 'YourUserName'; ...


2

run mysql and select the relevant database then use the MD5 function to set the password on the account that you want to change. For example if your phpbb3 database is called Yourphpbb3db and the users table is phpbb_users then mysql -u root -p enter your password mysql> show databases; mysql> use database Yourphpbb3db; Database changed mysql> ...


2

You can create an .htaccess file in the forum dirctory and put these the following lines may help to prtotect that url by accessing. Order allow,deny Deny from all


2

Put solution from OP Here's how: SSH to your server Because i'm in CentOS, cd /tmp Because i'm in CentOS, rpm -Uvh http://download.fedoraproject.org/pub/epel/6/i386/epel-release-6-7.noarch.rpm yum install fail2ban Edit /etc/fail2ban/jail.conf and add.. [apache-banforum] enabled = true filter = apache-banforum logpath = ...


2

1) In principle, yes. By clicking on links, the admin is performing actions. Specially crafted links can be created to perform undesirable actions. 2) Review the logs. Check file integrity. Determining if you've been hacked is not a trivial problem. 3) Accessed urls can be retrieved through the server logs. Deleted messages might be available in the SQL ...


2

the apache access logs will show you the link you clicked, if you can remember roughly when you clicked it and what IP you were using, you can minimize your search. also, you should be checking your logs for unusual activity, now, to see if you have indeed been exploited in some way. apache's logs are usually stored in /var/log/httpd/ or /var/log/apache ...


2

I know you already got recaptcha working, but I thought I'd add the link to the recaptcha documentation for phpBB anyway, in case anyone else finds this question in future: http://code.google.com/apis/recaptcha/docs/phpbb.html Would be nice if more people used this, rather than letting their phpBB fill up with spam. Ditto for blogs...


1

Instead of using reCaptcha (which reportedly has been broken by bots now), I upgraded my phpBB forum to the latest version last week and then configured it to use a Q&A captcha with a few custom questions defined (in additon to requiring activation by user emails, and moderation all new users until they have a few approved messages), and haven't had a ...


1

This can be tricky to track down. The first thing I would check is 'dmesg' for signs of disk write failures, possible memory corruption or kernel errors related to failing hardware. Periodically check 'top' for processes that might be running amok, as well as 'free' to check for signs of memory starvation of excessive swap usage. If the VM has any kind of ...


1

install chkrootkit on your machine and run that have a look at what dmesg and /var/log/messages say - neither of these should be empty, if they are there is a problem


1

I have static files served from my host via the following in my apache config: Alias /media /sites/mysite.org/www/media <Location /media> Order allow,deny Allow from all </Location> With that, Apache deals with the alias before it ever gets to Django. I assume you will just need to have php enabled for it to work against that ...


1

Are you using a captcha ? - if not, definitely do so it should help a fair bit. http://en.wikipedia.org/wiki/CAPTCHA


1

PHPbb does not handle incoming mail - your MTA does (postfix, sendmail, exim, etc.). You'll need to configure the forwarding in whatever MTA you have running.


1

One way you could try and tackle the problem is to fetch a coredump of PHP (after it segfaults), and then analyse coredump with GDB (with debuginfo packages installed on system). Then you could possible see what exact php line is giving you headache. Other then that - there's not much anyone can advise you on this one. ...


1

I would say go with App Engine first, see if it works for you. If you need more flexibility, it should be easy to migrate to Compute Engine. Feel free to use Containers if you know what you're doing.


1

I've not used phpbb myself, but according to the function generate_board_urls() there's a config value called "force_server_vars". When this is set you must also configure "server_protocol" (eg "http"), "server_name" ("my-dev-server"), "server_port" ("80") and "server_path" (I presume "/forums" or some variation)



Only top voted, non community-wiki answers of a minimum length are eligible