Kloxo security
147 views
Skip to first unread message
Will
Sep 23, 2012, 8:33:37 AM9/23/12
to lxd...@googlegroups.com, co...@lists.lxcenter.org
mustafa....@lxcenter.org
Sep 23, 2012, 9:29:40 AM9/23/12
to lxd...@googlegroups.com
I am not sure it's about kloxo security. It's look like user fault.
Two weeks ago, I was hire one of indonesia hacker to try hacking my
kloxo fork with setting nginx-proxy (apache using php-fpm), standard
disable_functions (only enable curl) and enable lxguard. I was give him
one account on kloxo. The result, he was give up.
BTW, I can not send from thunderbird with port 587/STARTTLS also port
25.
On 23.09.2012 08:33, Will wrote:
> Any ideas?
>
> &
>
> -Will
>
> --
> # http://en.wikipedia.org/wiki/Netiquette [1]
> # A: Because it messes up the order in which people normally read
> text.
> # Q: Why is top-posting such a bad thing?
> # A: Top-posting.
> # Q: What is the most annoying thing in e-mail?
>
> # To Unsubscribe, send an e-mail to:
> # lxdevel+u...@googlegroups.com
> #
> # For more options, visit:
> # http://groups.google.com/group/lxdevel [2]
>
> # At december, 11th 2011: 21 members.
> # At januari, 31th 2012: 25 members.
>
>
> Links:
> ------
> [1] http://en.wikipedia.org/wiki/Netiquette
> [2] http://groups.google.com/group/lxdevel
Two weeks ago, I was hire one of indonesia hacker to try hacking my
kloxo fork with setting nginx-proxy (apache using php-fpm), standard
disable_functions (only enable curl) and enable lxguard. I was give him
one account on kloxo. The result, he was give up.
BTW, I can not send from thunderbird with port 587/STARTTLS also port
25.
On 23.09.2012 08:33, Will wrote:
> Any ideas?
>
> &
>
> -Will
>
> --
> # http://en.wikipedia.org/wiki/Netiquette [1]
> # A: Because it messes up the order in which people normally read
> text.
> # Q: Why is top-posting such a bad thing?
> # A: Top-posting.
> # Q: What is the most annoying thing in e-mail?
>
> # To Unsubscribe, send an e-mail to:
> # lxdevel+u...@googlegroups.com
> #
> # For more options, visit:
> # http://groups.google.com/group/lxdevel [2]
>
> # At december, 11th 2011: 21 members.
> # At januari, 31th 2012: 25 members.
>
>
> Links:
> ------
> [1] http://en.wikipedia.org/wiki/Netiquette
> [2] http://groups.google.com/group/lxdevel
Will
Oct 4, 2012, 3:41:27 PM10/4/12
to lxd...@googlegroups.com, co...@lists.lxcenter.org
The webcommand.php file is most definitely the
source of the hacking. It allows SQL injections to be done with the
information being sent back. I have full logs of the exact
injections. Personally I have suggested the webcommand.php files be
renamed to webcommand.txt until this is fully reviewed and patched.
-Will
----- Original Message -----From: WillSent: Sunday, September 23, 2012 8:33 AMSubject: [Developers] Kloxo security--
# http://en.wikipedia.org/wiki/Netiquette
# A: Because it messes up the order in which people normally read text.
# Q: Why is top-posting such a bad thing?
# A: Top-posting.
# Q: What is the most annoying thing in e-mail?
# To Unsubscribe, send an e-mail to:
# lxdevel+u...@googlegroups.com
#
# For more options, visit:
# http://groups.google.com/group/lxdevel
Reply all
Reply to author
Forward
0 new messages