Server exploit -- Pass 40 - Page 2

**Rai** · May 16th, 2006, 6:52 PM

Quote:

Originally Posted by clayhenry

My apologies, I do realized that I missed to emphasis what server I was on and was speeking off.
The title should have been a good place to put it.

This is the first time I hear of this phpsuexec.

If you subscribe to the announcements board, you can get this kind of thing emailed to you, but this thread talks about its implimentation:
[Big Changes] PHPsuexec to be implemented on new servers

Kayla explains it pretty well there, and least for a php n00b like me. There are some other concerns that it brings up, however, it does eliminate the problem that you have highlighted for us.

Again, I personally do appreciate this notification. I actually had a few unknown PHP files appear on one of my older sites that I wasn't using, but forgot to kill the 777 folders on (it was running a CMS on it, but had been shut down). I'm going to update the title of this topic so that it reflects the server in question.

clayhenry · May 16th, 2006, 8:51 PM

Rai, I was not aware that you can subscribe to announcements boards. It would be nice if someone pointed me to that announcement in the first post.

I worried when I got it emailed to me from another host mentioning the problem and noticed it on mine.

Geoff, I'm not sure where you're coming from, I did correct my self. I'm sorry if I offended you.

I assume best thing to do is for the admin to delete this post. It appears to be useless and upsetting for everybody.

**GamingHybrid** · May 16th, 2006, 9:01 PM

Quote:

Originally Posted by clayhenry

I worried when I got it emailed to me from another host mentioning the problem and noticed it on mine.

Well, getting emails from other hosts about your current host having issues isnt the best to go by. Sometimes they are doing it to be helpful, most of the time they will do it (true or not) to get business.

**Kayla** · May 16th, 2006, 9:03 PM

Quote:

I assume best thing to do is for the admin to delete this post. It appears to be useless and upsetting for everybody.

It shouldn't have been.. I'm a little confused on how it got to this point.. but anywho..

Since you've been with us since early 2004, you probably haven't known as well about announcements as others (now a message to subscribe is in the welcome email.. posted on the support page, etc).

So that's understandable.

Basically, this is a problem that all hosts have that run user scripts in the default way (as nobody). We are slowly but surely migrating away from the standard. Servers that already have phpsuexec are the best performing servers we have and it has definitely been a great move.

Some people are not completely understanding what phpsuexec is.. unfortunately a few have cancelled over it instead of taking time to figure out a few permissions issues. We will try to educate everyone about it in the best way we can.

In the end, it's still a wonderful decision. It will be great when everyone is on a phpsuexec enabled server so we can all be on the exact same page. Then within the following months, we should all be well versed in how to implement its features in the best way for our unique needs.

**Kayla** · May 16th, 2006, 9:04 PM

Quote:

Originally Posted by GamingHybrid

Well, getting emails from other hosts about your current host having issues isnt the best to go by. Sometimes they are doing it to be helpful, most of the time they will do it (true or not) to get business.

I think he has an account with them, and one with us. Not sure why he would be getting an email from them if not.. but it's been known to happen in the past.

**Kayla** · May 16th, 2006, 9:23 PM

Ah, I like to keep newsletters going as well.

clayhenry · May 16th, 2006, 9:27 PM

Quote:

Originally Posted by Kayla

I think he has an account with them, and one with us. Not sure why he would be getting an email from them if not.. but it's been known to happen in the past.

Corrections: I had an account with them years ago. Still get their newsletters

lol

**Kayla** · May 16th, 2006, 9:28 PM

LOL, I was confused and just deleted the other one. Argh.

May 16th, 2006, 9:23 PM	#15 (permalink)
Kayla Marketing Maven Surpass Staff Joined in May 2003 Lives in Orlando 24,749 posts Gave thanks: 946 Thanked 806 times	Ah, I like to keep newsletters going as well. __________________ Follow Surpass on Twitter and Facebook Check out the Surpass Blog

May 16th, 2006, 9:28 PM	#17 (permalink)
Kayla Marketing Maven Surpass Staff Joined in May 2003 Lives in Orlando 24,749 posts Gave thanks: 946 Thanked 806 times	LOL, I was confused and just deleted the other one. Argh. __________________ Follow Surpass on Twitter and Facebook Check out the Surpass Blog

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search

May 16th, 2006, 8:51 PM	#11 (permalink)
clayhenry Registered User Seasoned Poster Joined in Apr 2004 Lives in edmonton, ab Hosted on pass5 84 posts Gave thanks: 0 Thanked 0 times	Rai, I was not aware that you can subscribe to announcements boards. It would be nice if someone pointed me to that announcement in the first post. I worried when I got it emailed to me from another host mentioning the problem and noticed it on mine. Geoff, I'm not sure where you're coming from, I did correct my self. I'm sorry if I offended you. I assume best thing to do is for the admin to delete this post. It appears to be useless and upsetting for everybody.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)