- support - lists.drupal.org

Re: [support] Malware issues- is there any permanent solution
by dd＠sucuri.net 20 Apr '10

20 Apr '10

Hey, You removed the issue, but didn't fix the problem. When you remove the malware, you also have to do the following: -Clean your desktop (run multiple AVs if needed). Lots of desktop-based virus are stealing FTP passwords stored on FTP clients to infected web sites. -Change your passwords -Update your installation. Are you using an old version? -Attackers always leave backdoors (90% of the time), to be able to get back to your site easily. Check for PHP scripts in there that you didn't add and that are not part of the default install... The best bet is to download your whole site and do a diff between it and a clean install version. Thanks, David Dede, http://sucuri.net On Tue, Apr 20, 2010 at 10:59 AM, sushyl <sushyl(a)gmail.com> wrote: > HI, > I am having malware problems with all my drupal sites. A piece of code gets > inserted in all or some javascript(.js) files. Its happening even to the > files with permissions "644". I have to remove the code and submit the site > for review on webmaster tools on google, so that mozilla-firefox does not > give malware. It takes 2-3 days. This is happening again and again, and i > have to repeat same process each time. Is there any permanent solution for > this issue? > > I am giving the code that gets into the files. Sometimes the links in that > code are different. > > Thanks > -- > Sushil Hanwate >

1 0

Re: [support] Malware issues- is there any permanent solution
by Evelien Fick 20 Apr '10

20 Apr '10

Did you change your ftp credentials after removing the script? Next you need to find the script that's vulnerable. That can be located at your site but if you're on share server it could be on any other site. You need to contact the provider to make sure everything is right. Evelien Op 20 apr 2010 07:30 schreef "sushyl" <sushyl(a)gmail.com>: HI, I am having malware problems with all my drupal sites. A piece of code gets inserted in all or some javascript(.js) files. Its happening even to the files with permissions "644". I have to remove the code and submit the site for review on webmaster tools on google, so that mozilla-firefox does not give malware. It takes 2-3 days. This is happening again and again, and i have to repeat same process each time. Is there any permanent solution for this issue? I am giving the code that gets into the files. Sometimes the links in that code are different. Thanks -- Sushil Hanwate -- [ Drupal support list | http://lists.drupal.org/ ]

2 1

Facebook and OpenSocial
by Henry Chew 20 Apr '10

20 Apr '10

Hi drupalists, I have been trying to fetch profile information from other social sites like facebook, google, myspace etc into drupal accounts/profile and come across several modules as below. The main objective is to import profile information from Facebook, but if there’re other alternatives that supports a bunch of social sites (including Facebook) like OpenSocial, I am open to it too. BTW does openSocial supports facebook at all? - OpenSocial Shindig-Integrator - Giyya Socialize (Paid solution?) - Facebook connect - Google Connect Any recommendations? Thank you so much. Kind Regards, CHEW, Henry Developer, Web BEHRINGER Holdings (Pte) Ltd IP Phone: 60651 ext 1730 Tel: +65 6845 1800 ext 1730 Fax: +65 6214 0275 Email: INFOServDrupSG(a)behringer.com Web: www.behringer.com youtube.com/behringer <http://www.youtube.com/behringer> twitter.com/behringer <http://www.twitter.com/behringer> facebook.com/behringer <http://www.facebook.com/behringer> myspace.com/behringerproducts <http://www.myspace.com/behringerproducts> flickr.com/behringerrocks <http://www.flickr.com/behringerrocks> J Build Teamwork J Take Ownership J Don’t Waste Resources J Clean Workplace = Clean Mind J Respect Guidelines and Policies J Improve Yourself and Help Others J Don’t Forget to Smile and Say Thank You This email is intended exclusively for the addressee(s) named above and may contain privileged and confidential information. If you are not (among) the intended recipient(s), you may not copy, utilize or distribute any of the information contained herein. If you have received this email in error, please notify us immediately via return email and delete the original from your mailbox. Thank you.

2 1

Re: [support] When are Caches Cleared?
by Rajaram Shyamala 20 Apr '10

20 Apr '10

Check this to understand Cron http://drupal.org/handbook/modules/system -----Original Message----- From: Rajaram Shyamala [mailto:shyamala@netlinkindia.com] Sent: Tuesday, April 20, 2010 6:22 AM To: 'support(a)drupal.org' Subject: RE: [support] When are Caches Cleared? Some links that will help you understand Caching and performance in Drupal. http://www.lullabot.com/articles/a_beginners_guide_to_caching_data http://drupal.org/node/326504 Shyamala -----Original Message----- From: support-bounces(a)drupal.org [mailto:support-bounces@drupal.org] On Behalf Of Earnie Boyd Sent: Tuesday, April 20, 2010 3:36 AM To: support(a)drupal.org Subject: Re: [support] When are Caches Cleared? Fred Jones wrote: > Running cron apparently does not clear the cache tables: > http://drupal.org/node/315303 > > Is there any time period when caches are automatically rebuilt? I > googled and can't find an answer to this seemingly-simple question. > > Thanks. Your question is vague. There are different types of "caches". Those that are true "caches" have an expiration field that control the rebuild of the cached data. If you mean the menu, well, it really isn't a cache even though it's rebuild is triggered by the "Clear cached data" button. The menu router data doesn't change unless you add a new module. The custom menu is handled slightly differently than the menus coming from modules but still the menu router doesn't change once you've set the menu. Why do you ask? Are you developing code and not seeing the caches change or is there some production issue you need resolved? -- Earnie -- http://progw.com -- http://www.for-my-kids.com -- [ Drupal support list | http://lists.drupal.org/ ]

1 0

I have Apache 2.2.9 webserver already installed but the two closes choices for webserver within the PHP setup are Apache 2.2.x Module and Apache CGI.
by John Mitchell 19 Apr '10

19 Apr '10

I am going to install Drupal but before I can I need to install PHP and when I am installing it asks to select the web server that I wish to connect PHP to. I have Apache 2.2.9 webserver already installed but the two closes choices for webserver within the PHP setup are Apache 2.2.x Module and Apache CGI. Which one should I select? Thanks, John -- John J. Mitchell

3 3

Creating Content Node Programmatically and Returning to Tab After Node is Saved, Wherever it was Called From
by Moses Elias (2) 19 Apr '10

19 Apr '10

I've created a new content type. The content type includes CCK fields. Now I want to call it by creating a node and saving it from a tab on certain pages. I want to do this from within a module. The module uses a MENU_LOCAL_TASK as well as a page_callback that's attached to a function to be called from specific locations on the site. When I click the tab I want to the content type to render, then add my information to the node and save it, but after saving to return to my original location. I tried using drupal_goto in the callback. That works fine and it takes me to my node, but it doesn't return me to my original location after the node data is saved. So if I can't return to my original tab, that option is not unsuitable. The other alternative is to use the following sequence of function calls in the page callback function in the following order: drupal_retrieve_form(); drupal_prepare_form(); and lastly drupal_render_form(); At this stage the node form is partially rendering but not all the fields are being displayed. I'm not even certain this is the correct way to programmatically add a node. Can anybody advise about best practices for programmatically adding a node through a drupal module? (I've even increased the module weight by defining it in the install file.) Thanks!

1 0

Configuring fckeditor to strip off ms word tags and html tags
by Mutuku Ndeti 19 Apr '10

19 Apr '10

Hellos, I am using drupal 6 and fckeditor for textarea. When users submit applications, they paste directly from word. This pastes with tag like "<meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="ProgId" content="Word.Document"> <meta name="Generator" content="Microsoft Word 11"> <meta name="Originator" content="Microsoft Word 11"> <link rel="File-List" href="file:///C:\DOCUME~1\ENSP4_3\LOCALS~1\Temp\msohtml1\04\clip_filelist.xml" /><o:smarttagtype namespaceuri="urn:schemas-microsoft-com:office:smarttags" name="PersonName" downloadurl="http://www.microsoft.com"></o:smarttagtype><!--[if gte mso 9]><xml> <w:WordDocument> <w:View>Normal</w:View> <w:Zoom>0</w:Zoom>" I want to configure fck editor to allow direct pasting from word without using "paste from word" window I have also enabled "full html" for all input formats, but everytime I write somethin on the fckeditor, I get <p> and <br> tags at the end It is a multiligual site.

1 0

gmap not visible within a specific theme
by Tracey Hummel 18 Apr '10

18 Apr '10

I have gmaps showing up fine with a theme like garland. When I switch to the Coolwater theme, the map image is not displayed. Any ideas why? Is this something within the css? Coolwater theme has not themeable functions or anything that might be over writing. Thanks, Tracey -- Tracey Hummel Web Developer University Information Technology Services Learning Technologies Services University of Arizona (520) 626-5139 tracey(a)uainfo.arizona.edu

3 2

Link a node to more user
by Michel Morelli 17 Apr '10

17 Apr '10

Hi all, I have some nodes (say "musical cd" ) and now I need to connect these nodes to users who bought them. Is there a module that can do it ? Is it possible to create a view that return the list of users that have bought a musical cd (node) ? Tnx. -- Michel 'ZioBudda' Morelli michel(a)ziobuddalabs.it Sviluppo applicazioni CMS DRUPAL e web dinamiche (LAMP+Ajax) Telefono: 0200619074 Telefono Cell: +39-3939890025 -- Fax: +39-0291390660 http://www.ziobudda.net ICQ: 58351764 http://www.ziobuddalabs.it Skype: zio_budda http://www.ziodrupal.net MSN: michel(a)ziobuddalabs.it JABBER: michel(a)ziobuddalabs.it

3 3

Re: [support] Hacked Drupal
by David 17 Apr '10

17 Apr '10

Thanks for this: I've signed up for Sucuri and a few other services to try and get a quick alert if this happens again. Luckily, it seems that as I was running Boost, people only saw the cached static html files and at no point hit the defaced index.php - which explains why it took a while notice. I'm pretty sure now it was an FTP attack and nothing Drupal related: I'm running Kaspersky which didn't pick up anything, but MalwareByte's AntiMalware picked up memman.vxd which looks like a Trojan. Icky. > Hi David, > > You asked for a monitoring solution that will alert you if your site > is modified or gets hacked/with malware. > > You could try http://sucuri.net. That's exactly what it does :) > > As far as your malware problem, we are seeing a large number of > desktop virus stealing FTP/SFTP credentials stored > on FTP/SFTP clients. Have you changed your password? Are you running > a good AV as well? >

1 0