SOLVED - Where oh where did my site go????

[korpirkor]

[Wed Oct 22 10:06:48 2008] [error] [client 82.177.144.96] File does not exist: /home/jorge/public_html/404.shtml

Hmm... its my ip. I am wondering why your server/script redirect me from index.php to error page...
I really dont know what happened, and how to fix it, but try comment this lines in index.php:

Code: Select all

else if (get_site_preference('enablecustom404') == '' || get_site_preference('enablecustom404') == "0")
{
	ErrorHandler404();
	exit;
}

to:

Code: Select all

/* else if (get_site_preference('enablecustom404') == '' || get_site_preference('enablecustom404') == "0")
{
	ErrorHandler404();
	exit;
}*/

[Pierre M.]

Hello,

I have been running CMSMS for a year ...
It was running great all this time without me doing a thing.
...
Please don't tell me I did anything. I didn't.

its V1.1

Are you saying you have set up a CMSms v1.1 on the wild web in october 2007 and not upgraded to 1.2 (released oct 2007), 1.3, 1.4 and 1.4.1 since then ? If so you are very lucky if your site has not been cracked.
If you have good database backups you can reinstall the old version and restore the db but then in need of upgradeS.

Pierre M.

[duclet]

From the error logs, I think your site has been hacked. Unfortunately, it is really hard to know what exactly happened but you can find out in the future by doing the following:


Get a stable version of the site up and running and then add it to a version control repository like Subversion. Create a checkout of the repository to be use as the web site. If something happens, just do an status check on it to see which file has been modified, deleted, added, etc.

As for this particular problem, I would suggest you do the following. Backup all the files in your uploads folder that you need and any files that is not part of the CMSMS package. Download the same version of CMSMS you are currently using. Completely remove your site and extract the files back. See if you site is working again. If it is, download the latest package and upgrade to the latest version. Hopefully, your database has not been hacked as well.

[nhaack]

The checking via subversion is a great idea... never thought of using it for tracing possible intrusions.

Good one

Best
Nils

[casapineiro]

OK, I got it up and running. Thanks for your help.

Can someone tell me (or point me to directions) on how to upgrade from 1.1 to the most recent 1.4 efficiently?

I will be more aware of upgrading in the future....

[korpirkor]

http://wiki.cmsmadesimple.org/index.php ... /Upgrading
+
http://dev.cmsmadesimple.org/frs/?group_id=6

The most obvious way to upgrade is replace all old files, with the new (1.4.1). If database is untouched, then it should work properly.

[casapineiro]

OK
I lost a thing or two, but no problem, I can fix them easily.
Thanks for ALL your help guys (and gals)