Hello everyone,
my dolphin sites are not working. I received a ton of emails from my server for "security attacks". All the emails are identica in message as foolows:
"Total impact: 3
Affected tags: xss, csrf, id
Variable: COOKIE.memberSession | Value: e.6QpejeUCP,//RvZfc2ihp=H6Htkdu. Impact: 3 | Tags: xss, csrf, id Description: Detects common comment types | Tags: xss, csrf, id | ID: 35
REMOTE_ADDR: 50.73.187.177 HTTP_X_FORWARDED_FOR: HTTP_CLIENT_IP: SCRIPT_FILENAME: /home/reseller1/domains/webmastersmarket.org/public_html/flash/XML.php QUERY_STRING: module=im&action=updateInvite&recipient=1&_t=1340154671890 REQUEST_URI: /flash/XML.php?module=im&action=updateInvite&recipient=1&_t=1340154671890 QUERY_STRING: module=im&action=updateInvite&recipient=1&_t=1340154671890 SCRIPT_NAME: /flash/XML.php PHP_SELF: /flash/XML.php"
If you check out any of my dolphin sites such as www.luloot.com or cosmosurf.net, they all give this error:
" Warning: preg_match() [function.preg-match]: Compilation failed: POSIX collating elements are not supported at offset 98 in/home/reseller1/domains/luloot.com/public_html/Hayde/plugins/phpids/IDS/Filter.php on line 124
Warning: preg_match() [function.preg-match]: Compilation failed: POSIX collating elements are not supported at offset 98 in/home/reseller1/domains/luloot.com/public_html/Hayde/plugins/phpids/IDS/Filter.php on line 124
Warning: preg_match() [function.preg-match]: Compilation failed: POSIX collating elements are not supported at offset 98 in/home/reseller1/domains/luloot.com/public_html/Hayde/plugins/phpids/IDS/Filter.php on line 124
Warning: Cannot modify header information - headers already sent by (output started at /home/reseller1/domains/luloot.com/public_html/Hayde/plugins/phpids/IDS/Filter.php:124) in/home/reseller1/domains/luloot.com/public_html/Hayde/inc/profiles.inc.php on line 484
Warning: Cannot modify header information - headers already sent by (output started at /home/reseller1/domains/luloot.com/public_html/Hayde/plugins/phpids/IDS/Filter.php:124) in/home/reseller1/domains/luloot.com/public_html/Hayde/inc/profiles.inc.php on line 485 Warning! Cannot evaluate Menu Cache. Warning! PageView cache cannot be evaluated. Please recompile. Warning: Cannot modify header information - headers already sent by (output started at /home/reseller1/domains/luloot.com/public_html/Hayde/plugins/phpids/IDS/Filter.php:124) in/home/reseller1/domains/luloot.com/public_html/Hayde/inc/design.inc.php on line 133
Warning: fopen(/home/reseller1/domains/luloot.com/public_html/Hayde/cache_public/bx_templ_js_985c7faf521ce950331b6a7f16391fd8.js) [function.fopen]: failed to open stream: No space left on device in /home/reseller1/domains/luloot.com/public_html/Hayde/inc/classes/BxDolTemplate.php on line 1096
Fatal error: Call to undefined method BxDolTemplate::_includeFile() in /home/reseller1/domains/luloot.com/public_html/Hayde/inc/classes/BxDolTemplate.phpon line 1103 "
If anyone can help, I would really appreciate it!!!
|
Something is going on and with dolphin I think.... I joined a dlophin site last night to look at a template and thismornign my hotmail had been compromised. Microsoft had closed it down because it had posted chineese style spam to thousands of people including all those on my hotmail list.... I had to call them in America and they informed me it has something to do with tracking cookies....
Just seems strange to me that this happened after joining a dolphin site with my hotmail details.
|
The phpids security thing built into Dolphin is horrible that's why it's disabled by default when you install Dolphin now. All the warnings it gives are false positives.
To disable it go to admin then advanced settings and security... set "send notice" and "block user" to -1.
Clear your cache and see if your problem goes away.
BoonEx Certified Host: Zarconia.net - Fully Supported Shared and Dedicated for Dolphin |
Hi,
The admin panel is not accessible either. So I cannot make the changes you suggested. Is there any file you think I should just replace with the original to solve this problem?
I really appreciate your help!!!
Thank you
|
You can go into the database through phpmyadmin and turn it off under sys_options. Then clear the cache manually by deleting everything (except .htaccess) in the /cache, /cache_public and /tmp directories.
Actually try clearing everything from those 3 directories (except .htaccess) first and see if that will let you get back in admin to turn it off normally.
BoonEx Certified Host: Zarconia.net - Fully Supported Shared and Dedicated for Dolphin |
I did go to phpmyadmin and turn it off under sys_options. I also deleted the cache files. Unfortunately, my problem has not changed.
I think the issue is more complex because all my dolphin sites in the same server suddenly have the same problem at the same time regardless of the domain (www.socialismfortherich.com, www.webmastersmarket.org, www.cosmosurf.biz, www.cosmosurf.net, www.luloot.com).
I even attempted to install dolphin in a test folder, which also failed. My autoinstaller softaculous (which I used to for all dolphin installations) returned the error "Could not write the Configuration File header.inc.php".
I have absolutely no clue!!!!
|
Softaculous was your first mistake. Those auto-installers are unreliable and known to produce corrupted installs.
Source: I keep having to fix them.
BoonEx Certified Host: Zarconia.net - Fully Supported Shared and Dedicated for Dolphin |
Talk to your host. This error here points to what is most likely the major portion of the problem.
Warning: fopen(/home/reseller1/domains/luloot.com/public_html/Hayde/cache_public/bx_templ_js_985c7faf521ce950331b6a7f16391fd8.js) [function.fopen]: failed to open stream: No space left on device in /home/reseller1/domains/luloot.com/public_html/Hayde/inc/classes/BxDolTemplate.php on line 1096
No space left on device basically means the hard drive on your server is full. The server cannot write anything, so pretty much everything is failing as a result.
Domino effect.
You may have other issues, but none of them can be worked on until that problem of a full hard drive is taken care of first,
https://www.deanbassett.com |
Can't believe I overlooked that, but Dean's right as usual...
Talk to your host. This error here points to what is most likely the major portion of the problem.
Warning: fopen(/home/reseller1/domains/luloot.com/public_html/Hayde/cache_public/bx_templ_js_985c7faf521ce950331b6a7f16391fd8.js) [function.fopen]: failed to open stream: No space left on device in /home/reseller1/domains/luloot.com/public_html/Hayde/inc/classes/BxDolTemplate.php on line 1096
No space left on device basically means the hard drive on your server is full. The server cannot write anything, so pretty much everything is failing as a result.
Domino effect.
You may have other issues, but none of them can be worked on until that problem of a full hard drive is taken care of first,
BoonEx Certified Host: Zarconia.net - Fully Supported Shared and Dedicated for Dolphin |
You are right! That could be the problem. However, the other websites (not dolphin script) on the same server are working fine. I do have an additional hard drive of two TB, but I do not know how to add it to the home directory.
I will try to resolve this and see what happens.
Thank you so much for your help!!!!
|
Hi,
I deleted a huge backup file to create some space as a temporary measure. I got this error now:
"1 Sorry, site is temporary unavailable. Please try again later."
You can check out one of my dolphin sites at www.luloot.com.
Something is definitely wrong
|
After you did that, did you also delete the contents in the dolphin cache folders again?
You should. Empty cache, cache_public and tmp except for any .htaccess files in them. Also check the permissions of all 3 of those folders and make sure they are writable.
The admin portion of that site does partially load. Kinda indicates to me that you still have a problem in the cache
https://www.deanbassett.com |
You were soooooooooo right!!!! You have no idea how much I appreciate your help!
Thank you so much!
|