Friday, June 11, 2010

IMHOSTED A TOTAL DISASTER 2010 HOSTING COMPANY? Part 3

> Andi: Well now you were able to restore the database but you have again forgotten to give us the propper permissions so that the application is actuallly able to get its data
> : Please wait for a site operator to respond.
> Andi: furthermore you restored the database in a latin1_swedish_ci
> : Please wait for a site operator to respond.
> : You are now chatting with 'Customer Service'.
> Customer Service: Hello Andi
> Andi: This is TOTALLY wrong as all tables have ben UTF8_general_ci before
> Andi: we general DON'T USE all latin stuff since 2006 as we have multiingual content on our site even in chinese etc.
> Andi: so before you reload a databsde you need to set the right collation and connections in my.cnf or mysql.ini
> Andi: all our sites were operating like this since 2006
> Andi: in about 99 % of the tables we have NO access at all
> Andi: nor does our applications have as you have restored the database with your root account and you have forgotten to give us the right permissions.
> Andi: go to phpmyadmin click on te House than permissions
> Andi: choose our user
> Andi: assign the databses to it
> Andi: and give all permissions - disable grant
> Andi: that is how it is done
> Andi: furthermore DON'T ACCESS the Install TOOL without our notice!
> Andi: we have been recorded multiple Hack Trials from Imhosted IPs
> Andi: i.e.
> Andi: There has been an Install Tool login attempt at TYPO3 site 'Domain' (domain.com). The MD5 hash of the last 5 characters of the password tried was 'ebee5'
> Andi: or
> Andi: There has been an Install Tool login attempt at TYPO3 site 'Domain' (domain.com). The MD5 hash of the last 5 characters of the password tried was '73247' REMOTE_ADDR was '119.82.99.147' ()
> Andi: This is incredible
> Andi: Either you know what you are doing or simply ask before managing a server of a customer
> Andi: or hacking into his account
> Andi: otherwise we have a nice headline:
> Andi: IMHOPSTED SUPPORT HACKING INTO CUSTOMER WEBSITES
> Customer Service: The mysql connectivity issue with your account has been already fixed nad the domain domain.com is loading fine. However the another domain is showing the Typo error even after restoring the database from backup. The database has full permission to the user
> Andi: No not at all we don't have permission
> Andi: we see with lots of "in use" messages
> Andi: simply check
> Andi: Warning: mysql_fetch_assoc(): supplied argument is not a valid MySQL result resource in /home2/domain/public_html/a1/t/typo3_src-4.3.0alpha3/t3lib/class.t3lib_db.php on line 1054 Warning: mysql_fetch_assoc(): supplied argument is not a valid MySQL result resource in /home2/domain/public_html/a1/t/typo3_src-4.3.0alpha3/t3lib/class.t3lib_db.php on line 1074 Warning:
> Andi: this is what we get
> Andi: Now the site is complete down
> Andi: http://custdomain/typo3/install/index.php?TYPO3_INSTALL[type]=update
> Customer Service: Yes. there is issue with server at this moment.
> Customer Service: We will really appreciate if you can post a support ticket so that we will have a better look to this issue. It is little bit difficult to give full attention to issues like this while on chat
> : Operator has ended this chat.

No comments: