Turn ON the geoip security and bind the login to your country and IP range. There is info about this on their site.
We too were hacked recently - because they actually logged in on an FTP account.
Check your FTP accounts and delete any that you did not create.
Always backup the files on your site periodically.
We do not recommend this host any more.
help. I'm on servage.net. i have contacted them and they said:
'Hello neil,
When I visited your site, it showed "Fatal error: Cannot redeclare get_counter() (previously declared in /mounted-storage/home95b/sub002/sc50334-PJGI/www/index.php:1) in /mounted-storage/home95b/sub002/sc50334-PJGI/www/index.php on line 1" which was absolutely scripting error.
You may re-install your script - we do not provide support third party script installation.
I am not sure why your script designer told you that it had been hacked.
Please note that an account can easily be exploited due to poor script/back dated script. Poor file permission or poor password may be another reason.
Regarding backup, We do backup our systems against data loss in cases of for instance hardware failure. However, we are unfortunately not able to offer a restore of single files or accounts from a past date. We therefore recommend that you always make your own backup for both web site content and database.
Thanks for your understanding!
Kind Regards
Sam, Support
Servage Hosting'
my website is www.neilpreston.co.uk
I would just like to know simply how to fix this.
thank you
Neil Preston
Yes, of course it's our fault (not really). Which is why they had to disable our FTP account when hackers managed to login in on it (because the hackers found a fault in their system). Which is why tons of sites on the same server us as that don't even use cms' have been hacked as well.
It's too complicated to simply fix...it's really not easy. You have to find all files throughout your system with the word 'index' in it and take out the hack...one by one...one at a time.
Your database is fine...so delete all your files and upload new files...be sure to keep the database connection information so you can reproduce the connection file.
You will need to work all your customizations back into things...
And be sure to backup your files so restoring after this kind of thing is nearly automatic.
ok thanks for your reply.
i kind of get what your saying apart from
'be sure to keep the database connection information so you can reproduce the connection file.'
what does that bit mean?
also is there a simple way to delete all files?
thanks Neil
Yes, deleting the files is easy...your ftp app does that.
Back thing up first...even if they are hacked...
The file at /ndxz-studio/config/config.php is your connection info. When you are done doing whatever with your files you will want the info from this file to create a new one (or you can reupload it to the right place as it wasn't hacked).
And then you are back in action.
THEN, backup a clean set of files just in case. This problem has been ongoing for months and it stopped...I had some reports the day this happened from other people that they were getting warning notes that people were trying to login to their accounts. The hackers, even with our obscure password, managed to login on our account...
The geoip tools have been helpful but we didn't have it bound to our ip addresses - now we do.
There is a reason why they are no longer mentioned in the Useful Threads post...
i'm sorry i don't get the top bit, what do i need to re upload? i'm so frustrated it took me ages to get this right.
Neil
The Indexhibit system files.
I believe you can set permissions to 755 on folders as well and you can still upload. But, if hackers are logging in via ftp what can you really do...nothing.
ok i really need an idiots guide.
i deleted the gimgs file.
what other files need to go?
which ones do i need to re-install?
thanks for your help Vaska, top man
Neil
THE SYSTEM FILES!
/ndxz-studio/
NOT THE FILES AND GIMGS FOLDERS!
You should just start over now...you've deleted your images.
shit.
how do i start over?
this is fucked.
my site still isn't working.
how do i make the message go away?
Neil
Reupload the root index.php file.
ok man i'll give it a go now
i'll be honest I can't find it
The index.php file that is inside the indexhibit folder when you download it to your computer > you should put it in the root folder of your site
You have to read more carefully!
ok. thank you for your advice.
I re-uploaded the index.php file through the website builder that servage offer. I now have a different message on my site.
Warning: require_once(ndxz-studio/defaults.php) [function.require-once]: failed to open stream: No such file or directory in /mounted-storage/home95b/sub002/sc50334-PJGI/www/index.php on line 9
Fatal error: require_once() [function.require]: Failed opening required 'ndxz-studio/defaults.php' (include_path='.:/usr/share/php5/') in /mounted-storage/home95b/sub002/sc50334-PJGI/www/index.php on line 9
what does this all mean? I remember i deleted 2 files named 'gimgs' which I created again and another one titled 'files'. does this affect anything?
help please.
Neil
It says you are missing some files...it's looking for...
/ndxz-studio/defaults.php
You haven't reuploaded everything.
I've uploaded that file now, it still says the same thing
neil
ok it's changed it now says
no direct script access allowed
suggestions?
neil
it's changed again. it now says
* Built with Indexhibit
am i any closer?
neil
www.neilpreston.co.uk
i have uploaded the index.php and the common.php.
the message on my site is now unreadable and i can no longer login through indexhibit.
help!
Neil
Send me your ftp login and I'll take a look at things...
contact [at] indexhibit [dot] org
i've emailed you
cheers for this
Vaska did you get a chance to look at it?
thanks
Neil
Yes...but you haven't even uploaded Indexhibit.
You know...I rarely ever advertise this around here...but we do have a paid installation service.
You have to start over now...you can use the How to install instructions...but since you already had an installation you will need to manually recreated the config.php file with your database connection info instead of running through things.
Vaska
thanks for your time.
I wiped everything and reuploaded the file through cyberduck becuase I couldn't work out how to do it through servage.
It's all there and I've changed the 3 files mentioned permissions to 777.
i type in
http://www.neilpreston.co.uk/ndxz-studio/install.php
and it says
'Not Found
The requested URL was not found on this server.'
which bit am i doing wrong?
thanks for your help, it is much appreciated.
Neil
i'm still lost
any help appreciated
neil
Vaska.
i'm really struggling here.
everything is in there, i've checked and double checked.
all the permissions are correct.
what am i doing wrong?
i've been trying to fix this for 3 days
please help man
Neil
it now says
Index of /
* indexhibitv070e 2/
Apache Server at neilpreston.co.uk Port 80
when you click on the link it says
database not installed
am I any closer?
Neil
Neil, are you really following the steps in the installation guide for dummies?
Specifically: "you drag the contents of the indexhibit folder (from your computer) into the root folder of your server."
I know all of these things can sound difficult, but you NEED to become a little more autonomous if you want to learn. Clearly you haven't uploaded the folder in the right place, and it's your job to figure out what you've done with it / where you've put it. Good luck.
ok. i;m on the config.php iv'e changed it to;
$indx['db'] = 'neilpreston1';
$indx['user'] = 'neilpreston1';
$indx['pass'] = '********';
$indx['host'] = 'servage.net';
$indx['sql'] = 'mysql1067.servage.net';
is that right?
please help
i have dragged it in to the folder called 'www' which i was told is the root folder
Then why is there a folder in your root called indexhibitv070e?
i've moved the folder over.
and changed the permissions.
still the install page won't show up.
i've tried to be autonomous, but being sat here for three days trying to figure out why you're website is fucked over is hard.
Neil
You do not need to move the folder over, just the contents.
ok well everything is definitely in the root folder. still no joy.
Do you have a ndxz-studio folder in it? because this doesn't work, and it should: http://www.neilpreston.co.uk/ndxz-studio/install.php
theres two files in the root folder.
www
indexhibitv070e2
there is a ndxz-studio file in the indexhibitv070e2 file.
neil
ok, i appreciate i read that wrong, i have dragged the contents over now. in the root folder it now reads
files
htcaccess
index.php
ndxz-studio
i have sorted the permisions.
http://www.neilpreston.co.uk/ndxz-studio/install.php
this still doesn't work
Neil
This says there's nothing in your root folder.
i don't understand. there are no files in my filemanger.
do i need to create one and put the indexhibit stuff in there? or do I (as i have done) just put the indexhibit stuff in the main page ( on the main page when i go to upload something to it it says /(root folder) )
what am i missing? i'm sorry to be such a hassle
neil
You need to put the contents of the indexhibit folder inside your root folder.
i have done
my root folder reads
files
ndxz-studio
htaccess
the folder www is referred to as document root.
should i upload indexhibit up to that folder?
I'VE DONE IT!
ITS UP
IT WORKS!!!
THANK YOU!
Ahem, Neil you should really consider removing your "install.php" file.
This thread has been closed, thank you.