you might be running in a mode that doesn't serve 777 files, try changing them to only allow the webserver to read, write execute, and anonymous to only read. hope that helps.<br><br><div class="gmail_quote">On Fri, Dec 17, 2010 at 7:04 PM, prothero <span dir="ltr"><<a href="mailto:prothero@geol.ucsb.edu">prothero@geol.ucsb.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div style="word-wrap: break-word;">Folks:<div>Not only do I get this error code, but several modules on my site have stopped working. The only thing I did was install the security module and mess with permissions on the /tmp folder. Sheesh! Very frustrating.</div>
<div>Bill</div><div><div class="im"><br><div> <span style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><div style="word-wrap: break-word;">
<span style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><div style="word-wrap: break-word;">
<span style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><span style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><span style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><span style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><p style="margin: 0px;">
<font style="font-size: 12px;" face="Helvetica" size="3"><span style="font-size: 12px;"><span style="font-size: 12px;"><span style="font-size: 12px;">William A. Prothero</span></span></span></font></p><p style="margin: 0px;">
<span style="font-size: 12px;"><a href="http://earthednet.org/" target="_blank">http://earthednet.org/</a></span></p><br></span></span></span></span><br></div></span></div></span> </div><br></div><div><div></div><div class="h5">
<div><div>On Dec 17, 2010, at 10:56 AM, prothero wrote:</div><br><blockquote type="cite"><div style="word-wrap: break-word;">Folks:<div>Thanks for the link to the security test.</div><div>I installed it, BUT, when I was messing with my permissions, so fix various file permissions, I did something very simple that caused an error message all through the site:</div>
<div><br></div><div>--message:</div><div><span style="font-family: Helvetica,Arial,sans-serif; color: rgb(34, 0, 0); font-size: 12px; line-height: 16px;">user warning: Can't create/write to file '/tmp/#sql_3cb2_0.MYI' (Errcode: 13) query: SELECT DISTINCT b.* FROM blocks b LEFT JOIN blocks_roles r ON b.module = r.module AND b.delta = r.delta WHERE b.theme = 'solarsentinel' AND b.status = 1 AND (r.rid IN (2) OR r.rid IS NULL) ORDER BY b.region, b.weight, b.module in /home/wap/public_html/modules/block/block.module on line 433</span></div>
<div><font color="#220000" face="Helvetica, Arial, sans-serif" size="3"><span style="font-size: 12px; line-height: 16px;">--end message.</span></font></div><div><font color="#220000" face="Helvetica, Arial, sans-serif" size="3"><span style="font-size: 12px; line-height: 16px;"><br>
</span></font></div><div><font color="#220000" face="Helvetica, Arial, sans-serif" size="3"><span style="font-size: 12px; line-height: 16px;">I understand that the error is in permissions for the /tmp directory. I got this error when I changed permissions, but now when I do chmod -R 0777 (as a test), I still get the error. This should set the permissions to "Everybody can do anything". What's up? I'm not a unix expert, but not a novice either and this confuses me. Does the "#" char at the start of the file name mean the file is invisible, ??</span></font></div>
<div><font color="#220000" face="Helvetica, Arial, sans-serif" size="3"><span style="font-size: 12px; line-height: 16px;"><br></span></font></div><div><font color="#220000" face="Helvetica, Arial, sans-serif" size="3"><span style="font-size: 12px; line-height: 16px;">Regards,</span></font></div>
<div><font color="#220000" face="Helvetica, Arial, sans-serif" size="3"><span style="font-size: 12px; line-height: 16px;">Bill</span></font></div><div><font color="#220000" face="Helvetica, Arial, sans-serif" size="3"><span style="font-size: 12px; line-height: 16px;"><br>
</span></font><div> <span style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><div style="word-wrap: break-word;">
<span style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><div style="word-wrap: break-word;">
<span style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><span style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><span style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><span style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><div style="margin: 0px;">
<font style="font-size: 12px;" face="Helvetica" size="3"><span style="font-size: 12px;"><span style="font-size: 12px;"><span style="font-size: 12px;">William A. Prothero</span></span></span></font></div><div style="margin: 0px;">
<span style="font-size: 12px;"><a href="http://earthednet.org/" target="_blank">http://earthednet.org/</a></span></div><br></span></span></span></span><br></div></span></div></span> </div><br><div><div>On Dec 16, 2010, at 11:00 PM, prothero wrote:</div>
<br><blockquote type="cite"><div style="word-wrap: break-word;">I had a similar hack happen. I had about 7 comments on a blog, in Russian, from an anonymous user. I have permission set so only registered users can make comments. Hmmm... I deleted them, but wonder what I should do to stop this in the future. I did set capcha so that comments require it. Drupal 6.19.<div>
Regards,</div><div>Bill</div><div><br><div> <span style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><div style="word-wrap: break-word;">
<span style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><div style="word-wrap: break-word;">
<span style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><span style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><span style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><span style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><div style="margin: 0px;">
<font style="font-size: 12px;" face="Helvetica" size="3"><span style="font-size: 12px;"><span style="font-size: 12px;"><span style="font-size: 12px;">William A. Prothero</span></span></span></font></div><div style="margin: 0px;">
<span style="font-size: 12px;"><a href="http://earthednet.org/" target="_blank">http://earthednet.org/</a></span></div><br></span></span></span></span><br></div></span></div></span> </div><br><div><div>On Dec 16, 2010, at 9:32 PM, Shai Gluskin wrote:</div>
<br><blockquote type="cite">Hi gang,<div><br></div><div>The author and URL of an anonymous comment was changed about three months after the comment was originally posted. The change happened last week. The new name was in Chinese and the URL is to a Chinese web site. The content of the comment was not changed.</div>
<div><br></div><div>I've never had anything like that happen before. After I discovered this I changed user/1 pw (that is the only account on the site with admin privileges).</div><div><br></div><div>There is no other evidence of other damage at the site that I found in the wake of this discovery.</div>
<div><br></div><div>(Site was using 6.19 at the time of the breach).</div><div><br></div><div>I'm stumped. Ideas anyone?</div><div><br></div><div>Shai</div> -- <br>[ Drupal support list | <a href="http://lists.drupal.org/" target="_blank">http://lists.drupal.org/</a> ]</blockquote>
</div><br></div></div>-- <br>[ Drupal support list | <a href="http://lists.drupal.org/" target="_blank">http://lists.drupal.org/</a> ]</blockquote></div><br></div></div>-- <br>[ Drupal support list | <a href="http://lists.drupal.org/" target="_blank">http://lists.drupal.org/</a> ]</blockquote>
</div><br></div></div></div></div><br>--<br>
[ Drupal support list | <a href="http://lists.drupal.org/" target="_blank">http://lists.drupal.org/</a> ]<br></blockquote></div><br><br clear="all"><br>-- <br>-- <br>--<br>Steve Power<br>Principal Consultant<br>Mobile: +44 (0) 7747 027 243<div>
Fax: +44 (0)160 421 2871<br>Skype: steev_initsix<br><a href="http://www.initsix.co.uk" target="_blank">www.initsix.co.uk</a> :: Initsix Heavy Engineering Limited<br>--<br>This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Initsix Heavy Engineering Limited.<br>
If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone.<br>Please contact the sender if you believe you have received this email in error.<br>
<br>Initsix Heavy Engineering Limited<br>Registered in the UK: 5036938<br>Registered Address: 243 Kettering Road, Northampton, NN2 7DU, England. </div><br>