How can we protect our htaccess file? This code has appeared there several times now: (inserted by hackers) RewriteBase / RewriteCond %{HTTP_USER_AGENT} (google|yahoo|msn|aol|bing) [OR] RewriteCond %{HTTP_REFERER} (google|yahoo|msn|aol|bing) RewriteRule . concernedly-conferrable.php [L,S=10000]  It redirects Google traffic away from our site. We changed all the passwords but after a few weeks the same problem again. Many thanks
This is a  about Server Security - Responding to Breach Events (Hacking)   See Also:                  Canonical Version I suspect that one or more of my servers is compromised by a hacker, virus, or other mechanism:   What are my first steps? When I arrive on site should I disconnect the server, preserve "evidence", are there other initial considerations? How do I go about getting services back online? How do I prevent the same thing from happening immediately again? Are there best practices or methodologies for learning from this incident? If I wanted to put a Incident Response Plan together, where would I start? Should this be part of my Disaster Recovery or Business Continuity Planning?   Original Version       2011.01.02 - I'm on my way into work at 9.30 p.m. on a Sunday because our server has been compromised somehow and was resulting in a    attack on our provider. The servers access to the Internet   has been shut down which means over 5-600 of our clients sites are now   down. Now this could be an FTP hack, or some weakness in code   somewhere. I'm not sure till I get there.      How can I track this down quickly? We're in for a whole lot of   litigation if I don't get the server back up ASAP. Any help is   appreciated. We are running Open SUSE 11.0.            2011.01.03 - Thanks to everyone for your help. Luckily I WASN'T the only person responsible for this server, just the nearest. We managed   to resolve this problem, although it may not apply to many others in a   different situation. I'll detail what we did.      We unplugged the server from the net. It was performing (attempting to   perform) a Denial Of Service attack on another server in Indonesia,   and the guilty party was also based there.      We firstly tried to identify where on the server this was coming from,   considering we have over 500 sites on the server, we expected to be   moonlighting for some time. However, with SSH access still, we ran a   command to find all files edited or created in the time the attacks   started. Luckily, the offending file was created over the winter   holidays which meant that not many other files were created on the   server at that time.      We were then able to identify the offending file which was inside the   uploaded images folder within a  website.      After a short cigarette break we concluded that, due to the files   location, it must have been uploaded via a file upload facility that   was inadequetly secured. After some googling, we found that there was   a security vulnerability that allowed files to be uploaded, within the   ZenCart admin panel, for a picture for a record company. (The section   that it never really even used), posting this form just uploaded any   file, it did not check the extension of the file, and didn't even   check to see if the user was logged in.      This meant that any files could be uploaded, including a PHP file for   the attack. We secured the vulnerability with ZenCart on the infected   site, and removed the offending files.      The job was done, and I was home for 2 a.m.            The Moral   - Always apply security patches for ZenCart, or any other CMS system for that matter. As when security updates are released, the whole   world is made aware of the vulnerability.   - Always do backups, and backup your backups.   - Employ or arrange for someone that will be there in times like these. To prevent anyone from relying on a panicy post on Server   Fault.
Every once in a while, someone comes to Meta to report a bug about something not working and it turns out that person is visiting one of the network sites over HTTPS/SSL. The problem has been growing since browsers started to outright block mixed content instead of showing a warning.  The usual answer is that HTTPS is not yet fully supported, and the person should try again using HTTP. Sometimes things get fixed, improving the situation a bit.  Is there a roadmap for full support? Partial support has been there for  now.  Is this actively being worked on? If not, what are the reasons to partially support it instead of disabling it completely to avoid these problems? If I buy a game from PSN on ps3 Is it permanently mine? Resizing point on zoom out How to check if specific column exists in an Access database table How to format date and time in Android? How to format correctly according to the device configuration date and time when having a year, month, day, hour and minute? If I use  \usepackage[colorlinks]{hyperref}   I get colored links for \cite (not good for printing or even viewing) but table of content looks fine.  If I use  \usepackage[colorlinks=false]{hyperref}   I get \cite  links in black with a colored frame (this looks very good) but the table of content looks strange with extra long boxes.  What are my other options? Can you have two styles in different parts of a document?   How do you make the page numbers in TOC to be the links instead of the section headers? Problem storing arrays with update_user_meta I am writing a function that adds an ID number to an array and puts the array in the usermeta. $_GET['auction'] is the post_id.  Below is the function:  $reminders = get_user_meta( $current_user-&gt;ID, "reminders" ); print_r( $reminders ); if( in_array( $_GET['auction'], $reminders ) ) {     echo "Failed: Auction already in list"; } else {     array_push( $reminders, intval( $_GET['auction'] ) );     if ( update_user_meta( $current_user-&gt;ID, "reminders", $reminders ) ) {         echo "Success";     } else {         echo "Failed: Could not update user meta";     } } print_r( $reminders );   Here is the output after adding one auction:  Array ( )  Success Array ( [0] =&gt; 7 )    Here is the output after adding two auctions:  Array ( [0] =&gt; Array ( [0] =&gt; 7 ) )  Success Array ( [0] =&gt; Array ( [0] =&gt; 7 ) [1] =&gt; 73 )   And here is the output after adding three auctions:  Array ( [0] =&gt; Array ( [0] =&gt; Array ( [0] =&gt; 7 ) [1] =&gt; 73 ) )  Success Array ( [0] =&gt; Array ( [0] =&gt; Array ( [0] =&gt; 7 ) [1] =&gt; 73 ) [1] =&gt; 0 )   Notice that adding a new element to the array using array_push works fine. But when the array is stored in the usermeta then retrieved again, the last element in the array has been put into an array of its own, creating an infinitely dimensional array. I'd prefer to keep this array one dimensional.  Is there a way I can run update_user_meta and get_user_meta without it changing the structure of my array? Is there a general formula for finding the primitive of $$e^{ax}\sin(bx)?$$  I've done this manually with $a=9$ and $b=4$ using Euler's formulas. But it takes a bit of time. Is there a pattern here? What are the limitations of healing magic? While reading Sorcerer's Stone, I just finished the chapter where Harry walks in on Snape and Filch bandaging Snape's leg.  In a previous chapter Neville falls off of his broom and we see that magic can easily heal his broken wrist.  If magic can heal an injury like broken bones, why wouldn't Snape heal his leg, which was just torn up by a 3-headed dog?  My initial thought was that only certain people specialize in healing magic, but while poking around this site I came across this question:   This shows that Snape had at least some healing abilities.  So why didn't he heal his own leg?  Are there limitations that prevented Snape from healing his own wounds? Blank lines in an equation and some other similar function Why blank lines between equation makes error? there are a lot of commands in latex and almost for all of them these blank lines are not important,  but why in this case is important and is there any similar function? A proof using Yoneda lemma bst file not found Using have gone to / been to / been in I understand the difference between these constructions: "has gone to", "has been to", "has been in":   "has gone to" &mdash; there or on his way to; "has been to" &mdash; someone has been there but he is on his way back; "has been in" &mdash; someone is still there;   But now I am puzzled by next statements:   Have you ever been to / in Greece? &mdash; Yes, it's a very beautiful country; When did you last go to Canada? &mdash; I've never been to Canada.   If I use "has you ever gone to Greece" construction in the first case or "I have never gone to Canada" in the second statement will it be uncorrect? Or just will sound odd? May I say "I have never been in Canada" in the second sentence. Or in these case all of the variants are possible, the problem is in how people usually say it (in what how it perfectly sounds)? Custom Settings and fields I have created the custom setting with the hierarchy type    I have added some fields to the custom settings  phone field is added to the custom settings  custom setting Name:Order_Configuration__c  Phone :12345 - one profile  phone:456798 - another profile   Is it possible to access the different values for different profiles in custom settings using apex trigger code Forward an invocation of a variadic function in C In C, is it possible to forward the invocation of a variadic function? As in,  int my_printf(char *fmt, ...) {     fprintf(stderr, "Calling printf with fmt %s", fmt);     return SOMEHOW_INVOKE_LIBC_PRINTF; }   Forwarding the invocation in the manner above obviously isn't strictly necessary in this case (since you could log invocations in other ways, or use vfprintf), but the codebase I'm working on requires the wrapper to do some actual work, and doesn't have (and can't have added) a helper function akin to vfprintf.  [Update: there seems to be some confusion based on the answers that have been supplied so far. To phrase the question another way: in general, can you wrap some arbitrary variadic function without modifying that function's definition.] Today I was cut off in the middle of the following sentence:     Between Cook, Strauss, and Pietersen—   My friend said I was wrong. He said that for more than two entities, among/amongst are used, and that between is only for two entities.   I vaguely remember some rule like this, but I asked him to hear the whole sentence, which was:     Between Cook, Strauss, and Pietersen, they’ve notched up 56 centuries in Test cricket.   Should I have used among here? Seems correct to me to use between, but my friend was certain.   Another friend pointed out the following sentence:     I’m still choosing between Harvard, Yale, and MIT.    Certainly among doesn’t seem to fit here, and she, to me, was correct in using between. "Overclocking" an AVR In AVR datasheets under the Electrical Characteristics section you will typically find a graph like this (this one is from the ATMega328):    I've seen designs that seem to "work" but operate outside the shaded envelope. Specifically, I've seen 3.3V (Arduino) designs that run the clock from an external 16MHz crystal. Clearly, this is out of spec. What are the practical negative consequences of running outside this envelope? How to activate GRASS GIS 7 plugin in QGIS 2.8? Escaping regex string Where do I find the maximum node? A lot of people recommend to use the maximum node for glass setup, but I can't find that node. Nothing comes up when I search for it.  Where do I find it?