Web Hosting Forum | Lunarpages


*
Welcome, Guest. Please login or register.
Did you miss your activation email?



Login with username, password and session length
May 25, 2012, 09:23:54 AM

Pages: [1]   Go Down
  Print  
Author Topic: What would you do if you were me UPDATED  (Read 902 times)
Toon_Dawg
Spaceship Captain
*****
Offline Offline

Posts: 105



WWW
« on: April 19, 2005, 02:09:42 PM »

My account was moved to the Quantz server due to "excessive php processing."  Well, basically the only answer I'm getting back from support is "this is your problem and you need to fix it."  I am so frustrated right now that I want to cry.  Crying or Very sad

So what would you do if you were me?  Here's my situation:

The only php websites on my pages are two scripts offered through Fantastico - postnuke and phpbb.  BOTH are on the latest updates.   The phpbb only uses a gender MOD, which basically only adds a field.  My postnuke site gets maybe 400 to 500 pageviews a day.  My phpbb board stats show averages to be 7.52 topics and 17.02 users a day.  I don't consider these to be high traffic websites.  Before removing one other phpbb board, I averaged 10 gig a month of bandwidth, which is far below the 40 gig the shuttle plan offers.   I have looked through my logs and I cannot find any evidence of hacker activity.  My php usage is at an all time low because I have removed so many php scripts in the past few months even before all of this came up.

I haven't gotten an answer as to why this started happening all of a sudden - was my account OK and now suddenly it's not?  Did they just start monitoring CPU usage?

What would you do if you were me?  I feel at this point my only solution is to leave Lunarpages.
Logged

Lupine1647
Berserker Poster
*****
Offline Offline

Posts: 10868


« Reply #1 on: April 19, 2005, 02:38:38 PM »

They've been monitoring CPU usage for a long time now. However if a server becomes more unstable, they begin to look at everyone's account on the server and if one account has a high CPU load, then they have to move it to keep the server stable.

You can upgrade to a different package where higher CPU usages are allowed. Another thing to do is disable those scripts (not remove them but just disable them and have the techs monitor your account for 24 hours to see if it's down enough. That way you can do trial and error to see what is the problem script.
Logged
Toon_Dawg
Spaceship Captain
*****
Offline Offline

Posts: 105



WWW
« Reply #2 on: April 19, 2005, 02:45:29 PM »

Quote from: Lupine1647
Another thing to do is disable those scripts (not remove them but just disable them and have the techs monitor your account for 24 hours to see if it's down enough. That way you can do trial and error to see what is the problem script.


Here's where I begin to have a problem - well, my only two scripts are phpbb 2.014 and postnuke (installed by Fantastico).  If one of them is a problem, then why are they offered on the Shuttle Plan?   Confused  Sad  I guess what I'm saying is that I wouldn't know what to do if they were a problem script, since they are both on the most updated version and from what I can see, they aren't the recipient of hack attempts.   Confused
Logged

JamesG
Web Designer UK
Berserker Poster
*****
Offline Offline

Posts: 12038


Web Designer


WWW
« Reply #3 on: April 19, 2005, 02:50:33 PM »

do you enable av uploading your phpbb board, something silly like this could up your usage, has someone uploaded something they should have, check the admin accounts make sure nobody else has access.
Logged

Toon_Dawg
Spaceship Captain
*****
Offline Offline

Posts: 105



WWW
« Reply #4 on: April 19, 2005, 03:05:56 PM »

Quote from: Garvey
so you enable av uploading your phpbb board, something silly like this could up your usage, has someone uploaded something they should have, check the admin accounts make sure nobody else has access.


Avatar uploading is not enabled, and I'm the only one with an administrator account.
Logged

Toon_Dawg
Spaceship Captain
*****
Offline Offline

Posts: 105



WWW
« Reply #5 on: April 19, 2005, 03:22:43 PM »

Something in another thread Garvey mentioned made me wonder - what about a compromise?  Since the phpbb board and the postnuke site are on different websites, could I compromise by removing the phpbb board to its own Shuttle plan?
Logged

JamesG
Web Designer UK
Berserker Poster
*****
Offline Offline

Posts: 12038


Web Designer


WWW
« Reply #6 on: April 19, 2005, 03:30:48 PM »

Toon_Dawg, i dont see why you couldn't try that, all i can reccomend is that you e-mail support@lunarpages.com first, and makes sure it will solve your problem...

you could sign up for the 30 day trial and see if it works, i will be happy to help you move your forum/postnuke to another account if need be.
Logged

JamesG
Web Designer UK
Berserker Poster
*****
Offline Offline

Posts: 12038


Web Designer


WWW
« Reply #7 on: April 19, 2005, 03:35:50 PM »

also... if you would like i will move your phpbbforum or your postnuke to another account (free of charge ofcourse) - if that doesn't work and you do need to switch away from LP, i will again help you to move both your sites... i definately encourage you to try the first approach
Logged

Toon_Dawg
Spaceship Captain
*****
Offline Offline

Posts: 105



WWW
« Reply #8 on: April 19, 2005, 06:21:00 PM »

I was looking through my raw access logs for my domain... but not my SUBDOMAIN.  After checking it, I found where the Santy worm was trying to hack into my phpbb.  Well, it doesn't succeed because I'm on 2.014, but according to phpbb.com, it can take up a lot of **CPU processing time**, which is my problem.

See this thread:
http://www.phpbb.com/phpBB/viewtopic.php?t=282846
Logged

Danielle
Guest
« Reply #9 on: April 19, 2005, 06:32:27 PM »

It might have worked before, though, because you were on 2.0.11 instead per your prior thread just a few days ago ( http://www.lunarforums.com/forum/viewtopic.php?t=25823 ) and so that is why you should check your account for any files/folders that shouldn't be there as well as block the IPs doing it in IP deny.
Logged
Toon_Dawg
Spaceship Captain
*****
Offline Offline

Posts: 105



WWW
« Reply #10 on: April 19, 2005, 06:47:31 PM »

The first thing I did was to check to see if anything had been hacked, and I didn't find any stray files.  I scanned through the logs but unfortunately, I didn't think to check the SUBDOMAIN logs, which is what address the worm was using.  I am blocking the IPs as we speak, and since adding the .htaccess file, the hits have stopped.  I am hoping that was the cause of my php processing problem.
Logged

JamesG
Web Designer UK
Berserker Poster
*****
Offline Offline

Posts: 12038


Web Designer


WWW
« Reply #11 on: April 20, 2005, 12:04:09 AM »

good catch Thumbs Up
Logged

Pages: [1]   Go Up
  Print  
 
Jump to: