[Solved] - suddenly "no config.php file or install/index.php..."

[Traill]

Hi everyone

I'm not one to post messages asking for help, but I really need it this time. For some reason, out of the blue today, all the pages on my site simply show a black page, with no source on it whatsoever.

I put CMSMS into debug mode and it says:

There is no config.php file or install/index.php please correct one these errors!

This is bizarre - I installed cmsms v1.2.3 ages ago, and it was working a few days ago. The config.php file is definitely there (I had to edit it to make it go into debug mode), and I don't have an /install folder obviously, because I deleted that presumably after I installed cmsms.

I was actually just about to upgrade to v1.2.5, but I'm hesitiant to touch anything. I can login into my admin panel, and everything is there as usual....

Any suggestions? Has my site been compromised? What can I do?

Please help. Thanks so much...

[Nullig]

Perhaps the editor you used to edit your config.php file corrupted it.

have you looked at your http logs, to see if there has been any unusual activity/access?

Nullig

[Traill]

Can you explain very quickly how to view those logs via FTP? Something very strange is going on. I've not touched anything, and now the message on every page is:

Database Connection Failed
Error: Access denied for user 'cms'@'localhost' (using password: YES) (1045)
Function Performed: CONNECT
Host/DB: localhost/cms
Database Type: mysql

Please help... thanks Nullig

[Nullig]

It depends on your hosting setup. If you browse to the absolute root of your site with your FTP program, look for a log directory or .log files. if you don't find them there, start looking in the subdirectories.

Does your host use cPanel, or somethimg similar, for you to manage your site? Usually, there's a logfile viewer there.

Nullig

[Traill]

I now cannot access my /admin panel in cmsms... I get the same message as above.

My hosting has cPanel, but I think I've found the logs in my root folder. Just opening them now.... what am I looking for exactly? Strange requests?

I imagine something has been compromised. Strange, as well my webhost disk space is also 800% exceeded. That's definitely not right! What do you reckon?

[Nullig]

Sounds like it's been compromised.

Perhaps your host has a backup you can use.

Nullig

[Traill]

Well, I guess this is a hosting issue and not a cmsms one. It's not nice seeing something crumble in front of your eyes like this

I've contacted my webhost. Thanks very much nullig - a stranger but my best friend tonight. Very much appreciated.

I notice my config.php has been wiped.... frightening. Ive changed my cpanel/FTP password... anything else I can do for damage limitation?

[Nullig]

Do the same for your db password.

If someone got to your config.php file, they'll know your db pwd. I would set up a whole new db with a different user/pwd combo.

I would recommend doing a fresh install, from scratch.

If you can get a dump of your old db, you could try importing it to a local install of CMSMS, to see if it's useable/corrupt/compromised. If it's OK, then import it to the new db.

Never underestimate the power of regular backups (files and data). They're your best friend.

Nullig

[Pierre M.]

Well, I guess this is a hosting issue and not a cmsms one.

I think so.

I've contacted my webhost.

Well done.

Some URL filtering doesn't hurt. See http://wiki.cmsmadesimple.org/index.php ... mall_Guide

Pierre M.

[Traill]

Just to update on this, my webhost did an investigation and found there to have been nothing compromised, which is what I had initially thought was the problem; the issue was in fact a file system error on the actual drive which was corrupting files all by itself. I am told that this is extremely rare and the fact I saw a file exist and then disappear (whilst i was flicking through my folders via FTP) was even rarer!

The good news is, my webhost had a full backup of everything from the day before, so after a quick ticket, they used their backup to restore my site to a new section of clean disk, and all is fine. How lucky is that?

Thanks for everyone's help... whilst we're here though, what is URL filtering and how does it work, out of interest?

[Pierre M.]

... the issue was in fact a file system error on the actual drive which was corrupting files all by itself. I am told that this is extremely rare and the fact I saw a file exist and then disappear (whilst i was flicking through my folders via FTP) was even rarer!

Cool is was investigated and diagnosed. Please put [solved] http://forum.cmsmadesimple.org/index.ph ... 692.0.html

Pierre M.