Attaching Large Files - Size Issue

[DaiAku]

Our host is Cirrus.

The hack came through Belarus I believe. They were somehow able to mess with our database but I dont think they actually got into our plesk panel or anything. @Zantetsuken had to manually fix the database - they flooded it with data somehow. Hopefully he can chime in with more details - I was away giving a talk at a local university at the time and he was able to fix everything. I am not sure how they got in.

 

[Zantetsuken]

Yeah all the webhost could provide was that the time we saw the issues start, there was an IP address from Belarus attempting (and failing) to access the Plesk Admin panel. Right after that they somehow managed to get access to the database and flood the session table with data preventing any new logons. With help from a couple of people here and some more digging I was able to truncate the table which fixed the issue and then locked down security a little harder. Not a clue how they accessed the DB though or if they just automated a ton of logins at the same time or something else. The webhost couldn't advise much more and logging was terrible.

 

[Deebs]

@Chris Deeming mentioned an nginx gateway timeout, are you using PHP-FPM? If so check the values of the following settings (your problem lies there I suspect):

client_max_body_size
client_body_timeout

 

[MattW]

@Chris Deeming mentioned an nginx gateway timeout, are you using PHP-FPM? If so check the values of the following settings (your problem lies there I suspect):

Was just about to suggest the same when I saw nginx mentioned.

In your nginx.conf, make sure that setting is set to the same as your PHP config

This is mine (15MB)

 client_max_body_size 15360k;

 

[DaiAku]

@Chris Deeming mentioned an nginx gateway timeout, are you using PHP-FPM? If so check the values of the following settings (your problem lies there I suspect):

Was just about to suggest the same when I saw nginx mentioned.

In your nginx.conf, make sure that setting is set to the same as your PHP config

This is mine (15MB)

 client_max_body_size 15360k;

Thanks guys. Where do I find these values? I did not find there here:

http://precursorgames.com/forums/admin.php?tools/phpinfo

Thanks,
Denis

 

[MattW]

Thanks guys. Where do I find these values? I did not find there here:

http://precursorgames.com/forums/admin.php?tools/phpinfo

Thanks,
Denis

in your nginx.conf file on the server

 

[DaiAku]

in your nginx.conf file on the server

Thanks - this host uses Plesk and I cannot find those settings. However, they are looking into it. Sorry guys - I am not much on the server server end and Plesk is making matters worse for me. @Zantetsuken does most of that stuff and he is away for a couple days now.

 

[Chris D]

I really would have expected your host to know about and check such settings...

 

[DaiAku]

I really would have expected your host to know about and check such settings...

Yah... We are pretty unhappy with them and are in the process of going with your host suggestion Chris. I sent them this thread info but they are pretty slow.

 

[rdn]

If your web server is Nginx, then maybe I know what's the problem.

 

[DaiAku]

If your web server is Nginx, then maybe I know what's the problem.

Thanks. How can I find that out?

Our providers have been less then helpful and we have decided to move servers. They response for the hack and this issue does not leave a lot to be desired .

 

[rdn]

Thanks. How can I find that out?

Our providers have been less then helpful and we have decided to move servers. They response for the hack and this issue does not leave a lot to be desired .

The same as What @Deebs post #23 and @MattW post #24 suggested.
This is mine: client_max_body_size 5120k;

 

[DaiAku]

The same as What @Deebs post #23 and @MattW post #24 suggested.
This is mine: client_max_body_size 5120k;

Ah ok thanks - well we are in the middle of a migration to Nimbus now. I will talk to them once this gets going but I have a feeling they will have it under control.

 

[rdn]

Good Luck with Them
I see some others here happy with them, But I'm not the one

 

[Chris D]

Why weren't you happy with Nimbus? I've never heard any negative feedback about them.

 

[DaiAku]

We just completed our migration - they have been awesome so far in helping us! They kind of saved our bacon frankly. Our previous host was a nightmare for us.

 

[Chris D]

That is my experience with them also. They are truly awesome.