UNA site was missing all day today
Was there any issue with UNA site? I couldn't open this page on browser or mobile app all day today. Only an hour or so ago it responded.
Was there any technical issue ?
-
-
·
LeonidS
- ·
Hello @Tajrebatee !
Yes, it was. Sorry for any inconvenience.
-
·
LeonidS
-
- · Tajrebatee
- ·
Thanks @LeonidS for clarifying. I got worried!
Was it a not anticipated technical glitch, or planned. In future, it will help to give us a heads up (if planned).
Thanks for what you do!
-
-
·
LeonidS
- ·
It hasn't been planned. Only glitch.
-
·
LeonidS
-
- · Chris Andre Buys
- ·
I thought you guys closed down lol... Almost got into my helicopter and shit the hell out of you'll lol..
Glitches happen, and tell me about it... anyway, good to see the site back online, I experienced the same as @Tajrebatee
-
@LeonidS My site had several files changed / added / replaced during the time the unacms.com site was down.
.htacces f7z8f78zf7z8fz536ff495.php index.php style.php
It looks like malware with payload for attacking a wordpress site. The reason that I was tipped off to this is that my site was only displaying a blank page where the front page should be. I am now in the process of restoring database and files from prior to this incident.
-
That's very strange; the UNA website outage shouldn't be affecting anyone's website in this way...😱 I think something else must have happened
-
Unless it is an issue with running the same software and there is a common exploit.
-
Sorry, but could you explain what you're talking about in more detail?
-
Sure! 😀 unacms.com is running unacms. So is everyone here (that's why we are here). If someone has found a way to write files to the server within the unacms directory / folder, then they could do what I describe above. That took my site down to a blank page. Something similar (or the same) could have happened to the unacms.com site. If there is a vulnerability with the unacms software that a bad actor exploited, then it could exist in all instances.
It would be helpful to hear more from the UNA people about what happened to their sites. It seems kind of odd that my site got compromised the same day theirs did.
-
- · Tajrebatee
- ·
Is your site hosted by UNA, or you have a separate host?
-
I think it’s just a coincidence. If you don’t have a secure storage system but it’s accessible from the outside, then of course anyone could have put anything there—but that’s not a fault of UNA CMS, it’s a fault of your settings. I could be wrong, of course, and as for the UNA outage, I actually have a feeling that changes are coming that the UNA team is preparing for, and we’re just guessing or dreaming about them for now :)
-
Private hosting.
-
Not generally accessible. That's not the issue. This is why I'm wondering about what happened with unacms.com. It would be helpful if more information than technical glitch was provided.
-
Hello @Te Ara Paerangi Community !
The blank page usually means the server error whici is tracked uin the logs. Could you please PM me with the server access to check what was there, because form my side, I could operate with another UNA site without similar troublesa that day.
-
Hi @LeonidS ,
I can give you the diffs in the files or share the files. I can confirm that the files and directories do not have write permission other than the owner. The changes turn off logging, so that will not be helpful.
-
Then you may send me the recent error log. Especially the PHP Fatal error messages.