php-windows Digest 9 Dec 2001 12:27:20 -0000 Issue 892

Topics (messages 10808 through 10813):

urgent mail() function error
        10808 by: Emad El-Din

Re: my MySQL hacked?
        10809 by: R'twick Niceorgaw
        10810 by: Nicholas James Pitt
        10811 by: Richard
        10813 by: Svensson, B.A.T. (HKG)

how to preparse php script so i can download it
        10812 by: R. Lindeman

Administrivia:

To subscribe to the digest, e-mail:
        [EMAIL PROTECTED]

To unsubscribe from the digest, e-mail:
        [EMAIL PROTECTED]

To post to the list, e-mail:
        [EMAIL PROTECTED]


----------------------------------------------------------------------
--- Begin Message ---
Hi all ,
I tried a lot to use the mail() function , but I'm always faced with an
error like this "Warning: Server Error in C:\apache\htdocs\mail.php on line
43".
I tried to get a script from the net, but it didn't work, I searched a lot
about this thing.
Do anyone have a solution?
I'm using Win98 with Apache webserver, and I'm connected to the internet.






--- End Message ---
--- Begin Message ---
move to a unix box never trust IIS/W2k !

-----Original Message-----
From: G Schneider [mailto:[EMAIL PROTECTED]]
Sent: Saturday, December 08, 2001 10:39 AM
To: [EMAIL PROTECTED]
Subject: [PHP-WIN] my MySQL hacked?


Okay, okay okay...

I got up this morning to discover that my MySQL server has had ALL its
databases DELETED except for the mysql.* one.

When looking in the mysql.user table, I discovered that there were now TWO
"root" users - except the new one required NO password.
Also, another root-access user had been given a twin (same username), but
requiring no password.

Into the bargain, all records on the mysql.db table had been erased.

Now what the HELL do you think caused this?

The server is protected by a firewall, running on IIS5/Windows2000, and
nope - nobody with root access gave their password away.

Could it have been a virus? This morning several viruses were cleared off
the hard-drive of the server (uploaded by members). Is there a virus that
can do this? If so, what is it?

Thankfully the MySQL server was not available for general use (to our
members) but was undegoing a sort-of 'testing period'. So nothing important
was lost. But I don't want to see this happen again! So can anybody shed any
light onto what could have caused this?!??!

Thanks,
- Jefferrs

(p.s. this post is being cross-posted to both alt.comp.lang.php and
alt.php.sql)

- Jefferrs




--
PHP Windows Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]




--- End Message ---
--- Begin Message ---
Hi There.

> > Could it have been a virus? This morning several viruses were cleared
off
> > the hard-drive of the server (uploaded by members). Is there a virus
that
> > can do this? If so, what is it?

The Badtrans virus has a password stealing trojan built in and has been
 pretty active recently. It is possible that this has been responsible for
 the breach in your security.

 Regards.

 Nick


--- End Message ---
--- Begin Message ---

Thats an interesting post for the php WINDOWS list.

Rick

-----Original Message-----
From: R'twick Niceorgaw [mailto:[EMAIL PROTECTED]]
Sent: Saturday, December 08, 2001 9:39 AM
To: 'G Schneider'; [EMAIL PROTECTED]
Subject: RE: [PHP-WIN] my MySQL hacked?


move to a unix box never trust IIS/W2k !

-----Original Message-----
From: G Schneider [mailto:[EMAIL PROTECTED]]
Sent: Saturday, December 08, 2001 10:39 AM
To: [EMAIL PROTECTED]
Subject: [PHP-WIN] my MySQL hacked?


Okay, okay okay...

I got up this morning to discover that my MySQL server has had ALL its
databases DELETED except for the mysql.* one.

When looking in the mysql.user table, I discovered that there were now TWO
"root" users - except the new one required NO password.
Also, another root-access user had been given a twin (same username), but
requiring no password.

Into the bargain, all records on the mysql.db table had been erased.

Now what the HELL do you think caused this?

The server is protected by a firewall, running on IIS5/Windows2000, and
nope - nobody with root access gave their password away.

Could it have been a virus? This morning several viruses were cleared off
the hard-drive of the server (uploaded by members). Is there a virus that
can do this? If so, what is it?

Thankfully the MySQL server was not available for general use (to our
members) but was undegoing a sort-of 'testing period'. So nothing important
was lost. But I don't want to see this happen again! So can anybody shed any
light onto what could have caused this?!??!

Thanks,
- Jefferrs

(p.s. this post is being cross-posted to both alt.comp.lang.php and
alt.php.sql)

- Jefferrs




--
PHP Windows Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]





--
PHP Windows Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]


--- End Message ---
--- Begin Message ---
We are on a mission you know. :) 

-----Original Message-----
From: Richard
To: [EMAIL PROTECTED]
Sent: 2001-12-08 22:00
Subject: RE: [PHP-WIN] my MySQL hacked?


Thats an interesting post for the php WINDOWS list.

Rick

-----Original Message-----
From: R'twick Niceorgaw [mailto:[EMAIL PROTECTED]]
Sent: Saturday, December 08, 2001 9:39 AM
To: 'G Schneider'; [EMAIL PROTECTED]
Subject: RE: [PHP-WIN] my MySQL hacked?


move to a unix box never trust IIS/W2k !

--- End Message ---
--- Begin Message ---
i've heard there is a way to preparse php script so i can download it could
anyone tell me how to do it please mail me if you know how to


[EMAIL PROTECTED]

thanx


--- End Message ---

Reply via email to