- This topic is empty.
-
Posts
-
Didn’t hear nothing about sql logger. Are you hosting your sites on shared hosting or on your own server?
Its on a dedicated server, so its my own pretty much. I dont have a binary log of SQL looking into that as we speak
just got done backing up the entire site/sql
I suppose that you are running mysql as database server. There is option to log all queries and connected usere, but you need to restart mysql server with some new command line options. But I don’t think that that will solve your problem.
What would I do in your place?
First I would change all passwords including root password. If this happening every day at same time than it must be scheduled somehow. I would look at cronjobs. Then my own scripts, proccesses. I would also do a grep search on hole system with some keywords like table name that are dropped.No unusual cron jobs, (the time is not exact each nite, nor can i really say it is every night)
no bad results on rootkit scan (new dl scan)
sql only listens on localhost
I am going to try and grep the text and see what i get
This is probably obvious but you do put all your variables in the mysql_real_escape_string() before they go into the db?
For the most part yes, id be more amazed if this is the cause.
I setup mysql binary logging so i should have the answer tomorrow
Rewards affiliate id 69998 is an ass… lol this pisses me off
allfreechips – is this guy hacking into your db?
If so ill get on it straight away.@Renee 147799 wrote:
allfreechips – is this guy hacking into your db?
If so ill get on it straight away.yeah he used that for my zodiak link
OK mate consider it fixed
Wow… this is crazy. :whoa:
Who is this rogue affiliate? Is he a member of CAP?
I don’t think the offender is an affiliate of CAP…
Cheers
Ty Renee! I hate hese people with the nerver to do such things, I should know his access point by tomorrow
and his IP
Excellent. Please PM me your info once you have it so I can record it on our end.
CheersSomehow he is running a VB cron that initiates a TRUNCATE TABLE, then addds all the data back in.. strill tracking the entire process
IP 75.83.153.248
– – [10/Dec/2007:18:55:07 -0600“GET /phpBB2/cron.php?rand=911745 HTTP/1.1” 200 43 “http://www.allfreechips.com/casino_guide/no-deposit-casinos.html” “Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)”
