₦airaland Forum

A software company is looking for intelligent and confident IT-savvy ladies to introduce its products in all states . This is initially a commission only position which can be transferred to a permanent sales or programming position after three months.
Please send a CV with mobile phone number to mail@ensap.com

Learn how to become a Joomla guru in 2 days with this exciting book. For details email mail@xceedia.co.uk

basking4me:
E-monkey,

1. I have enabled the module section to be able to use it. I have already installed some modules like panels, swf, ubercart, wysiwig, Videos, fckeditor, nice menu, image assist, image gallery etc etc.

2. I am currently using FCkeditor

3. Yes I also have image assist installed.

My problem is that when on the Wyswig (with fckeditor enabled) section and I want to upload a new image, I dont get the browse link or a drop and drop option. Instead what i see is a web-link option to the image i require whereas the image i want to upload is on my desktop.

Thanks for following up on this.

Now this is getting quite funky, and I guess access to your site back end is out of the question and you can't give me a screenshot of your node creation page, right ?. Now lets give it another shove. Image assist is OK to insert the image INSIDE the node content. Now to just attach an image to your node use Image attach module , but it will not work if upload is not enabled. Okay go !

basking4me:
E-monkey thanks for your reply.

On the drupal module section you see different editors. First you have to install wysiwig then install an editor ( quite a number are available) for them to work together.

Permission is not the issue here. I have installed this editor (ckeditor) but when i try to put photos using the editors I come to problems as there is no browse link to help me pick the photos from my system or a drag an drop option( which I am able to do with many other apps i Use), I dont want to have to first upload pictures  to an image folder before being able to use them, which is what the ckeditors and wysiwig are there for.

In the case of panel modules; I am using the latest v6 cos i only installed last week directly from their site. Pl see what you can assist with on this.

Regards.

OK I am working blind on this one but let's look at the possible problem by elimination.
Step 1- Have you enabled the Upload module and have you given yourself permission to use it ?
Step 2-  [Now please , please be patient with me] have you used CKeditor , or FCKeditor ? Please use FCKeditor and check your [module] configuration for any hitch. Run through the image/file browser check on the module page.
3. Do you have Image module installed ? Image Assist ? [I will get back to this point later]
Kindly check.

Dual Core:
https://www.nairaland.com/nigeria/topic-500825.0.html

OK f. uck me , I should have known all along that it is a bot . And bots can be incredibly dumb, especially within a SMF script. 
Can omnipotens or forum owner give us a list of spam words to avoid because my posts never contain any. Unless you are thinking of characters which may be php unfriendly.

My posts keep getting deleted without explanation and I consider this an extremely uncivilized way to run a forum. If anything has been done wrong one would think the best approach would be to tell the poster so that it doesn't get done again . In fact inmy case it has become like there is someone out there standing watch against my posts and most are deleted within a minute of being posted. I may appear paranoid but that is unfortunately the situation.

It wasn't the moderator "Omnipotens" though because he/she is not logged in at this time so it must be someone with higher administrative privilege. So who is cowardly deleting posts ? Anyone knows ?

I can show you how to develop exciting Joomla sites like a pro in 1 day if you text your email to 08031811137

basking4me:
Hello e-monkey, dhtml and my other brothers here.

Talking about Drupal, there are some modules in CCK; fckeditor and wsiwig that are a pure combination of issues for. How do i get them to wrk together. also, the panel modules are not activated in my module section.

any advice,

There are three main problem that can cause this :
1.Ensure that you are using the right version. Panel module for D5 will not work with D6.
2. Have you set right permissions ? 755 for folders; 644 for files
3. Have all the files been uploaded ? You may be surprised that ftp clients sometimes screw up on this.

As for CCK et al They should naturally work if you follow the correct installation direction and that includes installing dependencies FIRST. But out of curiosity how exactly would you wish them to work together ? please enlighten.
Cheers

Good for you. My company offers Saturday Introductory Drupal training anyway. Advanced training on weekdays. Call or text your email to 08031811137 for more info.

instinctg:
theres been controversies surrounding d pros and cons of both scripting languages (Coldfusion Or Php).
what are your views

What controversies ? PHP is free open source unlike coldfusion for example. And try finding a shared server to host your coldfusion application. Whatever the advantages of CF would chose PHP over it anyday

gdcomms:
I am doing it offline.I have tried but still some small wahala.Pls how do I create the blank data base?Can you assist cos I don't know!
Thanks *dhtml

Assuming you are using WAMP/XAMPP/MMAMP, You need to access phpmyadmin to create your database. Navigate to http://localhost and select phpmyadmin

^^^
Actually I also thought the story didn't quite compute . It should be a no-brainer for a server administrator to locate a rogue script and isolate it, but if Dualcore is not complaining who am I ? i sent the link for this thread to the hosting company though so that they can improve on their security especially since they have Drupal on install through Fantastico. Let's be our brothers helpers. I could have advised move to 1and1, but for this kind of problem they will permanently disable your site until you tell them how you plan to solve the problem.   The other bit about Drupal was a hoot however. 3 Drupal sites in one fell swoop !! Were you running on a multi-domain or multi-site install dude ?

Albato:
. . .

Another important safeguard is to change all passwords: ftp, cpanel, website etc. This should be done regularly. Especially after an attack. Sometimes hackers gains access to a server via your personal computer. Cookies on your PC have login records - including your ftp password. A smart hacker can access these from remote location, log in and wreck havoc.

Passwords are stored in cookies when you click the "remember me" check box common on login screens. A hacker could be waiting next time you want to click that "remember me" box  

Now that's getting extremely paranoid  

Dual Core:
I have a question. Can a cracker pose as a good guy and share his extensions and plugins (that are malicious) to the open CMS community? Is there anything like QA/QC on modules?

I have worked with Drupal for 5 years and as far as I know, you need to have "inside help" to get bad code on the official web site as downloads. Modules are double tested and double hacked by geniuses before they are accepted. Even something as harmless as documentation goes through the same QA/QC treatment. That is one of reasons why even the White House website runs on Drupal.  No sir, very little chance of a good or bad guy being that lucky. At least not someone who is so insane as to go hacking through someone else's pc firewall just to get login details for their server and then selectively trash websites.

Albato:
I have heard of some hackers defacing a site and then demanding a ransom in order to free the site. These ones leave a contact. Of course you cannot trace them easily. The obviously route everything through some captured bot computer ip.

Looking at the photo of the hack, there are some jargon on there that I think resemble how he accomplished his act or contact details

Oh yes I did try to find him on the net because I wanted to avoid the gruelling work of reactivating my site manually (which I had to do in the end). He was untraceable. The only details I found led to hacker forums. I found this guy has wrecked many dreams. On one site they actually had a scoreboard of who has defaced the most websites. Its appaling this guys get a kick from ruining people's livelihood and dreams.

I lost 6 sites in this attack. My wordpress sites were ok but the support staff at bluehost told me he could have left a hidden script somewhere. I therefore reset the account to zero. The next 1 month will be for rebuilding again.

I don't completely doubt the veracity of your story but a few things baffle me :
1. Why would a determined hacker attack a Drupal 6 site and leave Wordpress sites alone considering that Wordpress scripts are notoriously more vulnerable to attack by spammers?. He must really like a hard life.
2. DoS attacks do not work this way at all. Your screenshot only reveals server info and  well . . . nothing else.
3. If Bluehost cannot tell you for certain if he/she had "left a hidden script somewhere", there is something wrong with their service and I suggest you buy from a different hosting company.

@OP
Did you report this at the Drupal official website ? They probably would have found you a fix.  I know people who are still running Drupal 4 without problems.

Did you check that you did not unknowingly permit users to use PHP code in posts ?

In any case PHP & MySQL was designed so that it won't be penetrated by the old SQL injection. In MySQL, when un-escaped values are passed, or if there are any incorrect syntax, it won't just process the request(sql command) and won't return any information about the database structure - so this won't give hackers any idea of how you designed your database.

In case of any error, this is handled by the mysql_error() function which is not shown by default and it's only up to the programmer to display it or not. And again, mysql_error() won't give any information about your database structure, it only shows a certain part where error occurred and an enough idea where a fix to the latter mistake should takes place.

From what I know about the culprit DZ-Z3R0 , what he/she does is compromise your database and make automated posting/spamming possible. He/she is more likely to work on blogging sites or article directory sites.

If hackers can hack computer systems like the US IRS and the US Marine Corps, I think that it's a little paranoid to worry about these people.

One to one and group tuition is offered for new Drupal and Joomla users.

Objective : Creating and administering a Drupal/Joomla! site

Location : Ibadan


Intermediate and Advanced instructions also offered.

email your enquiries : mail@xceedia.co.uk

Or call: 07028777368 , 07041819362

That will be quickly recognised as spamming and I am sure your ISP will close you down within a couple of weeks and you may be prosecuted.

New IT and Publishing company is looking for trainees preferably nearly graduating students looking for industrial attachment . all positions are in Ibadan.

Administrative secretary - Graduate of Secretarial studies, Business Administration or similar with passable word processing and office organising skill.

Editor / PR Copywriter - English Graduate with good word processing skills. Familiarily with MS Word "Track changes" tool is important. Experience with any DTP software an advantage.

PHP Coder - Basic PHP programming skills . Experience with Joomla or Drupal and Notepad++ an advantage but not specifically required if you are willing to learn.

HTML/CSS coder - Good hand coding skills. Proficiency with Dreamweaver an advantage.

Software training assistants - Computer science / IT graduate with a flair for lecturing.

All positions are on hotdesk basis . Good laid-back working environment. Good allowance and opportunities to make fantastic commissions.

Please send application to mail@xceedia.co.uk

Interviewing continously.

New IT and Publishing company is looking for trainees preferably nearly graduating students looking for industrial attachment . all positions are in Ibadan.

Administrative secretary - Graduate of Secretarial studies, Business Administration or similar with passable word processing and office organising skill.

Editor / PR Copywriter - English Graduate with good word processing. Familiarily with MS Word "Track changes" tool is important.

PHP Coder - Basic PHP programming skills .

HTML/CSS coder - Good hand coding skills. Proficiency with Dreamweaver an advantage.

Software training assistants - Computer science / IT graduate with a flair for lecturing.

All positions are on hotdesk basis . Good laid-back working environment. Good allowance and opportunities to make fantastic commissions.

Please send application to mail@xceedia.co.uk

Interviewing continously.

Freelance  Drupal, Joomla, Wordpress, DNN, Coldfusion, Java, Rails, Flash  developers are always wanted. Please see for details :
www.nigeriaopensource.org

There is no "indication" as of now  and that is why participation is being solicited.It is supposed to be for discussion "forums" and not a personal "seminar". Users can create new forums and blogs of their interest and invite discussions.
Present content only points to the fact that more open source software are created for Linux than any other platform .
Windows is not my forte, but if you suggest a forum I will add it.

I am creating a new forum for the discussion of open source software. I need some ideas and participation here.Kindly help : http://www.nigeriaopensource.org

2 persons are wanted to test out some new online web development tutorials . Selected persons will receive free use of the course materials .Any one interested should contact mail@xceedia.co.uk
The courses are located at http://www.weblearn.xceedia.co.uk
Important : Please state your level of experience with Drupal.