My website was attacked yesterday, SQL injection attack thanks to the parameter left open I made the necessary editing in php codes. sql code of the attack (SELECT 7105 FROM (SELECT(SLEEP(32-(IF(ORD(MID((SELECT HEX(IFNULL(CAST(table_name AS NCHAR),0x20)) FROM INFORMATION_SCHEMA.TABLES WHERE table_schema=0x7472616b75735f647974726f726774657374 LIMIT 29,1),10,1))&gt;49,0,32)))))FfpS)  I regularly review access and mysql logs. There were no new attacks on the url, but the slowness of my web site still continues. I monitor the processes with the show full processlist command, sometimes the sleep command comes into play. Could a timer have been created?
This is a  about Server Security - Responding to Breach Events (Hacking)   See Also:                  Canonical Version I suspect that one or more of my servers is compromised by a hacker, virus, or other mechanism:   What are my first steps? When I arrive on site should I disconnect the server, preserve "evidence", are there other initial considerations? How do I go about getting services back online? How do I prevent the same thing from happening immediately again? Are there best practices or methodologies for learning from this incident? If I wanted to put a Incident Response Plan together, where would I start? Should this be part of my Disaster Recovery or Business Continuity Planning?   Original Version       2011.01.02 - I'm on my way into work at 9.30 p.m. on a Sunday because our server has been compromised somehow and was resulting in a    attack on our provider. The servers access to the Internet   has been shut down which means over 5-600 of our clients sites are now   down. Now this could be an FTP hack, or some weakness in code   somewhere. I'm not sure till I get there.      How can I track this down quickly? We're in for a whole lot of   litigation if I don't get the server back up ASAP. Any help is   appreciated. We are running Open SUSE 11.0.            2011.01.03 - Thanks to everyone for your help. Luckily I WASN'T the only person responsible for this server, just the nearest. We managed   to resolve this problem, although it may not apply to many others in a   different situation. I'll detail what we did.      We unplugged the server from the net. It was performing (attempting to   perform) a Denial Of Service attack on another server in Indonesia,   and the guilty party was also based there.      We firstly tried to identify where on the server this was coming from,   considering we have over 500 sites on the server, we expected to be   moonlighting for some time. However, with SSH access still, we ran a   command to find all files edited or created in the time the attacks   started. Luckily, the offending file was created over the winter   holidays which meant that not many other files were created on the   server at that time.      We were then able to identify the offending file which was inside the   uploaded images folder within a  website.      After a short cigarette break we concluded that, due to the files   location, it must have been uploaded via a file upload facility that   was inadequetly secured. After some googling, we found that there was   a security vulnerability that allowed files to be uploaded, within the   ZenCart admin panel, for a picture for a record company. (The section   that it never really even used), posting this form just uploaded any   file, it did not check the extension of the file, and didn't even   check to see if the user was logged in.      This meant that any files could be uploaded, including a PHP file for   the attack. We secured the vulnerability with ZenCart on the infected   site, and removed the offending files.      The job was done, and I was home for 2 a.m.            The Moral   - Always apply security patches for ZenCart, or any other CMS system for that matter. As when security updates are released, the whole   world is made aware of the vulnerability.   - Always do backups, and backup your backups.   - Employ or arrange for someone that will be there in times like these. To prevent anyone from relying on a panicy post on Server   Fault.
When I run followind command: qdbus I get following error:  qdbus: could not find a Qt installation of ''  I've read alot of old questions with same error but not one helps me.  I've tried execute following commands sudo apt-get install qt5-default + same for for qt4, etc. but still have same error.  If any additional information required for this issue - please add comment and I'll provide info. Feature request - links underlined Nature of the quantum degeneracy pressure It is commonly known that it is the electron degeneracy pressure that prevents the collapse of a white dwarf into a neutron star, and it is not the electromagnetic force. However, it is also widely accepted that all the forces in the universe are just manifestations of the four elementary forces in the universe. So can the degeneracy pressure, caused due to Pauli's Exclusion principle, be shown to be due to one of these forces? I have read some other questions in SE , , and they do not answer my question fully.  In one of the links, the degeneracy pressure is described as an 'entropic force', but as far as I understand, all entropic forces can be explained by the underlying fundamental forces. If the degeneracy pressure is something that is fundamentally different from the other forces, why isn't it classified as a separate force? What is the default root password? Let $A$ and $B$ be two sets of real numbers. Define the distance from $A$ to $B$ by $$\rho (A,B) = \inf \{ |a-b| : a \in A, b \in B\} \;.$$ Give an example to show that the distance between two closed sets can be $0$ even if the two sets are disjoint. I just picked up a copy of Windows 7 Pro OEM for install on my computer.  Guy at the store said the only real difference between OEM and standard retail box was tech support.  However, the outside of the box has this big warning that says "The software must be installed with an OPK"?  What is the OPK?  Is it really necessary?  The MS site about it seemed to say it was optional.  EDIT:  BTW - I'm just an individual tinkerer, and not a System Builder Company Employee.  I should have made that clear.  I've used sysprep in a professional setting in the past, so I'm somewhat familiar with its concepts. Is it possible to Pivot data using LINQ? What is the limit of $\lim\limits_{x→∞}\frac{\sin x}{x}$ FM transmitter design? I stumbled across a relatively simple FM radio transmitter online.    Credit:   I wanted to understand how it works (it is called "super simple" on the website), but several hours I have nothing but a vague understanding.   I believe R2, L1, C3 form an oscillator, and then the transistor Q1 is used to modulate the signal. C1 would just be used to remove any DC offset. However, this leaves R1, C2, C4, C5, and R3 and,  for these components,  I have no clue what they do.   Could someone please explain how this "super simple" transmitter works? What are valid values for the id attribute in HTML? MacBook Pro detects syncmaster (monitor) but doesn't display MySQL search in comma list Missing "References" heading How do I get the local machine name in C#? /usr/bin/sudo must be owned by uid 0 and have the setuid bit set I have run following command accidentally   sudo chown [username] -hR /   Now sudo su getting error:  sudo: /usr/bin/sudo must be owned by uid 0 and have the setuid bit set   How to Solve This? Change the Fill Color of a cell if the value of that cell equals the value of another specific cell I want to change the fill color of cell C5 if it has the same value as cell A5.   Can this be done? I know how to format cell C5 if it has a certain value - but not when it is to be compared to the value of another cell. Why did the writers select the date November 5, 1955 in Back to the Future? Is there any significance to the date November 5, 1955 that was chosen in Back to the Future? Is it one of the directors birthday or something like that or were there specific real life events that day in history?   I am not looking for in-universe answers. Handler frame_change_pre doesn't work in render this works in viewport but not in render.  import bpy from math import *  def frame_handler(scene):     z = scene.objects['Lift'].location[2]     scene.objects['Text'].data.body = str(floor(z / 4.0) - 2)  bpy.app.handlers.frame_change_pre.clear() bpy.app.handlers.frame_change_pre.append(frame_handler)   How to get it working in render? I've read  and changed from "bpy.data.objects" to "scene.objects" as already seen in the script. What am I missing? Blender v. 2.81.16  Edit. Tried that depsgraph thing mentioned in comments and changed to frame_change_post:  import bpy from bpy.app.handlers import persistent from math import *  @persistent  # maybe not relevant but doesn't harm anything? def frame_handler(scene, depsgraph):     z = scene.objects['Lift'].evaluated_get(depsgraph).location[2]     scene.objects['Text'].data.body = str(floor(z / 4.0) - 2)  bpy.app.handlers.frame_change_pre.clear() bpy.app.handlers.frame_change_post.clear() bpy.app.handlers.frame_change_post.append(frame_handler)   Now the Text doesn't show up at all in rendered (but works in viewport). At what point does a caster define the target of a spell? The new School of Invention tradition for Wizards () while still in playtesting (and indeed a bit silly in my opinion, more of a "chaos wizard"), got me thinking about its reckless casting ability. This allows the caster to cast magic they do not have prepared and get a random result. The random spells have different targeting criteria (Wall of Stone, Fireball, Feign Death , Mass Cure Wounds) and so it is not possible to decide the target of the spell until it has been cast, as you don't know what you are going to get until it is cast.  This suggests that the designer of the subclass has made the assumption that you don't actually target until you have cast the spell and release it, which makes sense from one point of view, strongly supported by the way a prepared action casting works, PHB p.193 where you cast the spell and hold the energy until the condition is met for the readied action at which point you target the spell.  While the Unearthed Arcana is not RAW or finalized and released, my question is not about this subclass, but about the official rules as a whole.  Is there was any direct RAW, or other supporting or opposing RAW, that states at what point a caster defines the target of a spell?  As a sub-question: are there any circumstances where it actually matters, other than the already defined Readied Action spell casting, in the official rules? Shouldn't the twoside option produce a wider margin at the binding/spine edge, rather than the other way around? I'm using \documentclass[twoside]{report}.