Roland Schwarz wrote:

Rene Rivera schrieb:

...

Somehow, i.e. someone, all the information files and user info files got deleted. I'll post an SF request about it... all I can really do. NOTE: The uploaded files themselves are still there, it's just the admin data that is missing.

Any new information available about the Vault?

I got this from SF support: === Greetings, There is no permissions issue, that is simply a documented problem of the permissions that must be set on files for the webserver to write them. We highly recommend you consider moving to MySQL for the storage of your writable content, as that is less likely to be destroyed by an extraneous file removal by another user. Per: https://www.sf.net/docs/E07 Projects are expected to maintain their own backups. You should restore the content from your most recent backup, we have no reasonably easy way to restore your content. Thank you, David Burley Senior Second Level Support Technician, SourceForge.net burley@sourceforge.net === I have been trying to figure out a way to fix the permissions issues that SF has since they are unwilling to fix their own configuration. But I have been unable to find a solution as SF has not provided any of the Apache modules, or anything else, that are normally available, as in by any other web service installation. I spent a few hours yesterday on this. So if anyone has any ideas on how to get the equivalent of suexec execution, without the help of the web server, it would be appreciated. And yes I already tried straight sticky permissions.

BTW.: How can you tell the uploaded files asre still there?

Well when I said the above the files where there. But I looked again and it seems the files are also gone :-( This is very annoying to say the least. Since we lost those files it seems we might as well consider solving the SF problems by installing a vault someplace else. Any volunteers? Does anyone have an Apache server with a small amount of space and a fair amount of bandwidth? I can't put it on my server as I just don't have the bandwidth available. I'm going to check the Boost Consulting server since we server the Boost mirror from that.

Is there another access available?

I was looking at the files directly on the shell machine. -- -- Grafik - Don't Assume Anything -- Redshift Software, Inc. - http://redshift-software.com -- rrivera/acm.org - grafik/redshift-software.com -- 102708583/icq - grafikrobot/aim - Grafik/jabber.org

Roland Schwarz wrote:

Rene Rivera schrieb:

...

I got this from SF support:

=== Greetings,

There is no permissions issue, that is simply a documented problem of the permissions that must be set on files for the webserver to write them. We highly recommend you consider moving to MySQL for the storage of your writable content, as that is less likely to be destroyed by an extraneous file removal by another user.

Does this mean that the files could have been deleted by a bad user?

Well either a malicious user, or a really stupid one.

This really hurts!

Yes!

Hopefully all posters still have backups. sti <snip>

...

I can't put it on my server as I just don't have the bandwidth available. I'm going to check the Boost Consulting server since we server the Boost mirror from that.

Do you have enough bandwith to schedule a regular backup to your machine?

I do... but SF doesn't provide any easy was to do reliable backups. They mention using tar and scp, which is horribly insufficient. I'm in the middle of moving the vault to http://boost-consulting.com/vault - Just getting some of the details working.

What else comes to mind is using a peer to peer file sharing program. Do you have any experience with this?

Well I have experience using P2P. But not setting up a server, or tracking etc. -- -- Grafik - Don't Assume Anything -- Redshift Software, Inc. - http://redshift-software.com -- rrivera/acm.org - grafik/redshift-software.com -- 102708583/icq - grafikrobot/aim - Grafik/jabber.org

Rene Rivera schrieb:

OK, that is now working. Again, the new vault is at:

http://boost-consulting.com/vault/

Almost nothing survived the intrusion, so people will have to register again, and upload again.

Great! Thank you. BTW.: Wouldn't it be meanigful to set up a basic directory structure by some kind of topic? The boost libraries listed by category comes to mind... Any thoughts? Regards, Roland

Rene Rivera wrote:

Roland Schwarz wrote:

...

Any thoughts?

How about following the current groupings that we have in http://www.boost.org/libs/libraries.htm#Category ??

I went ahead and added directories that match those groupings. It's up to individuals to move the current files if they want. -- -- Grafik - Don't Assume Anything -- Redshift Software, Inc. - http://redshift-software.com -- rrivera/acm.org - grafik/redshift-software.com -- 102708583/icq - grafikrobot/aim - Grafik/jabber.org

I've moved my file to the new place, but I am not able to delete the original directory, which is of no use yet. Could you do this plaeas? The name of the directory is: thread_alert.

Same happens with thread_ex. Regards, Ion

Rene Rivera wrote:

OK, that is now working. Again, the new vault is at:

http://boost-consulting.com/vault/

There is a newer version of the PHPATM script available, and the changelog says "BIG SECURITY HOLE FIXED! PLASE UPGRADE FROM ANY PREVIOUS VERSION". Perhaps you should take a look at it. Link: http://phpatm.free.fr/

Rene Rivera <grafik.list@redshift-software.com> writes:

Rene Rivera wrote:

...

I'm in the middle of moving the vault to http://boost-consulting.com/vault - Just getting some of the details working.

OK, that is now working. Again, the new vault is at:

http://boost-consulting.com/vault/

Hey, Rene, thanks for setting this up! Just wanted to remind you that we're borrowing the host for boost-consulting.com, and as such, we may need to be careful that we don't fill it up. -- Dave Abrahams Boost Consulting www.boost-consulting.com