[論壇公佈]發現有2個網頁檔案被插入程式碼問題已修復，用戶請即採取下列措施 [復制鏈接]

ecko:我間唔中都有入黎睇下有冇突別事既~
有野就 whatsapp / line / facebook la~ (2013-04-04 21:00) 

做咩淨係上黎睇下有冇事，而唔入去吹下水。

freezefox:
做咩淨係上黎睇下有冇事，而唔入去吹下水。[表情]

  有時間就覆我facebook message la~ @freezefox  

見到

ECKO，供應商完全無理我個電郵喎！

freezefox:ECKO，供應商完全無理我個電郵喎！ (2013-04-27 14:47)

你有冇ticket system 個email 同 password 呀?

http://home.geeks.hk/supporttickets.php

email 唔覆係好正常~ 因為人地真係用ticket system~

ecko:你有冇ticket system 個email 同 password 呀?
http://home.geeks.hk/supporttickets.php
....... (2013-04-28 20:52) 

我呢兩日打比佢。


PW 我要CHECK 一CHECK先知。

freezefox:我呢兩日打比佢。
PW 我要CHECK 一CHECK先知。 (2013-04-28 21:29) 

好的~ 急都急唔黎~
btw~ 你返左香港未?

ecko:好的~ 急都急唔黎~
btw~ 你返左香港未? (2013-04-28 22:25) 

返左兩日。

咁就好啦~ 可以吹下你搞啦~

ecko:咁就好啦~ 可以吹下你搞啦~ [表情]  (2013-04-28 22:51) 

聽日第一日返工，會忙少少。不過後日要見客，更忙，所以盡量聽日下午攪掂佢。

Hi Jacob,

Can you SMS your root password to 9017XXXX. We will access your server and diagnose the issue. We will also put in some security measure and update the firewall system to drop the brute force. In regarding to the webpages being hacked over and over again, you will also need ot go through folders to see if there is any file doesnt seem to be yours, you can see it easily by the folder's last changes (date). There must be a PHP file that acting as a "web upload" that can send commands. I will access PHP file to disable common executive commands such as exec() and shell_exec() but this will cause some program to fail, do alert us if you experience issue.

Thanks

Alistair Lam

佢今日話原來之前收唔到我地既電郵。所以我RESEND 多次比佢。然後佢回左呢段野比我地。

比root account~ 我有少少concern~
我會問埋桶少~ 我地都agree 就比啦~

ecko:比root account~ 我有少少concern~
我會問埋桶少~ 我地都agree 就比啦~ (2013-05-02 20:52) 

定係我地自己都可以攪得掂。

Latest email from support

Dear Daniel,
We have already secured your server. Please note several changes have been made in DirectAdmin Control Panel
1) Brute Force Monitor - This is to monitor the past 4 days of Brute Force. Only monitors, it won't do anymore than this
2) ConfigServer Firewall&Security - This is a firewall and login failure daemon, what it does it will monitor any brute force and send to the firewall for blocking. You can also key in IP address and click "Block" in a very convenience way.
Additionally, we have made some further security
1) PHP - disable some basic dangerous function - shell_exec(), dl() and etc...
2) Port Change - From 22 into xxxx to minimize brute force into SSH
3) Renamed /home/admin/public_html/index.php into virus.index.php. This is because it is scanned to have virus linkage by Norton.
The new Directadmin password is sent to you, please change accordingly.