Home | Reviews | GUIpedia | Forum | Fun500


BrandonServer Problems
Well I received e-mails from 1and1 and it said that my account was sending spam e-mails. So forum post subscriptions are disabled, also new user registrations are disabled until farther notice.
2008-11-222:35 PM

ToddRe:Server Problems
How'd that happen? 1&1 is pretty sensitive when it comes to those things. I remember when Xeta Space was on 1&1, someone uploaded a photo of Japanese porn and 1&1 shut my site down until I called them up just to have them tell me it was a bad image. I removed it and they reactivated my account.
2008-11-222:37 PM

BrandonRe:Server Problems
I found what I was looking for, I disabled user account activation, meaning that I'm expecting a lot of spam users. Meaning: New Users can register.
2008-11-222:38 PM

BrandonRe:Server Problems
I was using the PHP include command, and apparently I was hacked through it, so how do I fix it, there Mr. Todd "PHP" Suess? EDIT: Maybe I'll make my include "http://brandoncornell.com/".FILENAME not just FILENAME
2008-11-222:55 PM

ToddRe:Server Problems
Are all the files in "FILENAME" HTML files? Because you could use this: [code] $p = pathinfo($FILENAME); if ($p['extension'] == "htm" || $p['extension'] == "html") readfile($FILENAME); else readfile("index.html"); [/code]
2008-11-223:05 PM

BrandonRe:Server Problems
My problem was remote files could be included, so I just set it up to put "http://brandoncornell.com/" to the beginning of the include statement.
2008-11-223:16 PM

ToddRe:Server Problems
That should work. "readfile" works safest since it's only reading on the server and not elsewhere.
2008-11-223:23 PM

BrandonRe:Server Problems
I see so readfile is basically include, except it will only read local (on the same server) files?
2008-11-223:28 PM

ToddRe:Server Problems
It should. But you can put in a safeguard to have it remove any "://" from the "FILENAME" variable. So if someone put in "http://www.google.com/" it would show up as "httpwww.google.com/". It would still access your server but it would be looking for a directory called "httpwww.google.com".
2008-11-224:33 PM

Blog


2021 Brandon Cornell