09-Nov-2006

Wordpress works!

One problem I could solve myself - which gave the admin page the proper look. The other one required some assistnace but I was on the right track.
Anyway, it's just 4 lines:
redirect /wordpress/ /wordpress/index.php?
redirect /wordpress/**/ /wordpress/*/index.php?
exec /wordpress/**.php (cgi_exe:phpwasd.exe)/wordpress/*.php ods=5 script=syntax=unix script=query=none map=once
pass /wordpress/* /wordpress/* ods=5 search=none
and now Wordpress is up and running.
Not for the real stuff yest, it will require some extra work and investigation, to be sure the product is up to the standards.

But...
still one thing more to cover, but I think this is merely a PHP problem.
Craeting backups requires write access to two directores because some data is written there (the backup itself and some metadata). That's not really a problem, were it not that PHP will just look to the UIC-based protection, and ignore ACL's.
Workaround: use PHPMYADMIN (running as well) or mysqladmin.

Security
Someone requested assistance on problems with the OSU webserver and my suspicion is that this is caused by intrusoin detection. To help him, I created a small procedure to scan the accounting files for people using bad passwords quite often and I found some attempts on Diana abusing the FTP account (port 21) since 01-Jan-2005: twice assuming Diana is a Windowes machine (who else would try to overflow the server with FTP logins as "Administrator" several times a second - for over an hour!. And one trying to attempt to login as 'root'.
All failed, of course.
But now I now scan accounting on a daily basis - nothing found anymore.