(Nov 19, 2013 02:59 AM)Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ Wrote:  1. Running their WHMCS as root

(Nov 19, 2013 02:59 AM)Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ Wrote:  Holy jeez, Running EVERYONE as "Nobody" is so hopeless. Make it stop

(Nov 19, 2013 02:59 AM)Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ Wrote:  3. Disabling all php scripts that have their perms as 777 (https://puu.sh/5mVNk/5b1e7a0f1f.png)

(Nov 19, 2013 02:59 AM)Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ Wrote:  I can guarantee it isn't premium

(Nov 21, 2013 02:43 AM)Orgy Wrote:  I stopped here. What?

Do you mean they're running their webserver as root?

---

I think he just meant the webserver is running as 'nobody', which is pretty standard.

---

Are you saying they deleted your PHP scripts that were CHMOD 777?

(Nov 21, 2013 02:46 AM)Orgy Wrote:  How can you guarantee this?

(Nov 21, 2013 03:50 AM)Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ Wrote:  They have installed their WHMCS under the root account. So if someone hexed it than they would instantly have a r00t shell

(Nov 21, 2013 03:50 AM)Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ Wrote:  Not just the webserver, every USER is now running as nobody, if you do id you will get UID 99 and GID 99

(Nov 21, 2013 03:50 AM)Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ Wrote:  As for the php scripts, if they are chmodded to 777 you get the good old 403

(Nov 21, 2013 03:50 AM)Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ Wrote:  2. They are probably adding a price on there but I wouldn't say it's a premium

(Nov 21, 2013 03:55 AM)Orgy Wrote:  Hexed? And under what root account? Are you saying that uid0 is the owner of the PHP files? That won't really make a difference, since the webserver is the one running the PHP files.

What do you mean every 'user' is running as nobody? You sound confused here. Surely everyone doesn't have the same username 'nobody', or everyone would be logging into eachother's cPanel.

Well that's just plain silly, though I don't see why you'd need to CHMOD 777, anyway.

---

Considering 'quality' is a relative term, it's kind of hard to guarantee that they aren't offering a 'premium' service.

(Nov 21, 2013 04:01 AM)Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ Wrote:  Yeh, UID 0 = What whmcs was installed under. Correct me if I'm wrong but can't someone just mod the PHP file to include command execution and then run commands as root?

(Nov 21, 2013 04:01 AM)Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ Wrote:  Users have different names, e.g a28483, A4838294 and so on but when you create files they are ran as nobody (With the "id" command)

(Nov 21, 2013 04:01 AM)Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ Wrote:  Yeak ik, but still. If someone wants to use a PHP script under 777 they should be allowed

(Nov 21, 2013 04:04 AM)Orgy Wrote:  No. It's going to run as whatever the webserver is running as.

That's because they are being ran by the webserver, which is running as 'nobody'. There's absolutely nothing wrong with this, and it'd actually be very strange if they had a bunch of webservers running as each user.

Why? Do you even know CHMOD 777 is?

I understand you're frustrated that they aren't processing your refund faster, but you're only ridiculing yourself, here.

(Nov 21, 2013 04:13 AM)Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ Wrote:  read, write execute for everyone (777). I'm on my iPad at the moment and might get on my computer later so I can explain it better without taking 10 minutes to write a word

(Nov 21, 2013 12:56 PM)crossings Wrote:  I was cheated too by this person HaX420 , I looked over the net for cheap Romanian hosting reseller service and http://www.xhostfire.com/ looked very cheap. But this cost me 24usd with no refund. This is for search engines to find this post easier : HaX420 cheater , cheater HaX420 , cheater xhostfire.com , xhostfire.com cheater.

So what happent was simple, I registered to them, and my account is down since 4 hours now. I cannot acces my own WHM panel http://5.254.101.117:2082/ . HaX420 comes with this answer to my ticket "In the normal course of business, we expect there may be occasional problems. " . What do you think ? 4 Hours of downtime and still counting ! Professional answer, what can I say. Really, it is a big scammer xhostfire.com, scam xhostfire.com, scam HaX420 correct answer.

This is the first time I was cheated in my entire life. This is the picture with scam HaX420 http://postimg.org/image/6k4g1orpx/ .

I live in Romania, this guy is really in bad luck because I will press charges on Voxility company who provide the services (its a local Romanian company) and I'am sure they are going to take drastic messures.

(Nov 21, 2013 12:58 PM)Monetization Wrote:  I just read this, And thought 2 things... Your grammer is bad lol.

And, Your going to press charges over something on the internet of 24 Usd? Damn bro. Don't you think lawyers, Court fees and all that would cost more? Good luck on that. 🤝