And I shall also raise a glass to Tom! Take your time.
Buffistas Building a Better Board ++
Do you have problems, concerns, or recommendations about the technical side of the Phoenix? Air them here. Compliments also welcome.
Thank you, Tom! I'm not helpful. But I'm all energy-supportive, if that helps at all. And tremendously grateful, too.
Have a lovely evening, Tom.
YAAAAAAAAAAAAY!!!! Huzzah, three cheers for the Scola!
Hip hip HOORAY!
Hip hip HOORAY!
Hip hip HOORAY!!!
Okay, okay, we better move the Scola-worship back to Natter or somewhere before ita ! gets back and thinks all these posts are things she needs to resolve. (Me too, not coming down on anyone here.)
post-mortem later
So what happened?
Hackers got in again, via Plesk.
They modified the /etc/php.conf and /etc/httpd/conf/httpd.conf file so that PHP would insert malicious code into people’s browsers whenever a PHP page was visited. Fortunately, the hijacked PHP would not execute and instead would fail immediately. Unfortunately, this caused the entire site to go down—probably a better outcome than the alternative.
Scanning the system afterwards, I found the only other changes to the system at the time of the attack were to some Plesk internals. At the very least, Plesk needs to be wiped out and reinstalled from scratch.
At this point, I would recommend moving to a whole new server, with an up to date version of Plesk, and an up to date OS (we’re running CentOS 4.9). If iStrata can’t provide us this, then we should switch hosting.
If we're starting from scratch, any reason to stay? It is more exhausting moving across the state instead of down the hall, but we will have to pick up everything and find its place in the new digs, and I suspect we will have to pay them for any help they give us.
Mostly I blanch at the change of address part of the metaphor.
I agree with Tom.
Although the iStrata guys were really good when I rented my server seven or eight years ago, they haven't kept up with the times. There's no reason to get an actual physical server these days when a virtual server could easily handle the board's load.
We might even be able to run the entire thing out of the Amazon EC2 free tier for a year.
If not, the Linode guys are highly regarded.