Your Pants Are Down... And Yes, This Is Going To Hurt

DeadGuy · 05-20-2010, 08:47 AM

As a courtesy Public Service Announcement... you need to be aware of this, if you have not already read about it. If you don't own a website, disregard this notice.

There have been numerous threads posted on the forum about site hacking, here is one way you can minimize it. Please check your Anonymous FTP settings. Go to your hosting account control panel, look for Anonymous FTP, and turn it off... like now! This is a major security hole and most hosting providers have this enabled by default.

Bluehost and other hosting providers have started issuing warnings about this setting, and it is a change that many simply are not aware of or overlook. Maybe this will help someone out there.

Lou Diamond · 05-20-2010, 10:07 AM

Hello,
thanks for the heads up, I do not know why this setting is even allowed in this day and age.

DeadGuy · 05-20-2010, 10:13 AM

There are actually legitimate reasons that someone could use this with their internet business... like allowing their customers to upload things. There are other, much better ways to do that now. But back in the day when the internet was pristine, tecky an honest, who would have thunk?

I agree with you wholeheartedly. The default position should be "OFF", not "ON".

Joseph Then · 05-20-2010, 11:12 AM

Thanks for the update. Good thing that my host turns it off by default. Whew!

rosetrees · 05-20-2010, 12:24 PM

Sorry to be thick DeadGuy - can you give me some clues about where to find this in cpanel? Thanks

DeadGuy · 05-20-2010, 12:52 PM

Quote:

Originally Posted by rosetrees

Sorry to be thick DeadGuy - can you give me some clues about where to find this in cpanel? Thanks

No problem. The Annonymous FTP is usually located in the "Files" section of the cpanel.

Michael Oksa · 05-20-2010, 12:55 PM

I agree. It should be turned off by default.

If it isn't already, then the host could certainly make it the default.

In other words, the notices they are sending should say something like, "We have just changed all accounts to the off position for anonymous FTP. If you would like to have that feature enabled, you will have to[list of steps]."

At the very least, give a few days notice before the change so those that do use it wouldn't have an interruption of that feature.

All the best,
Michael

esr · 05-20-2010, 01:36 PM

Thanks for the heads up. I never even thought about this. I just went in to my cpanel and there it was, plain as day, enabled.

If you use Hostgator, as I do, you'll want to check this out immediately.

DPM70 · 05-20-2010, 01:46 PM

I use hostgator and mine was not enabled. Having said that, my sites are less than a year old, so perhaps they have fixed it on newer accounts?

Thanks for the heads up, though!

Dennis Gaskill · 05-20-2010, 01:51 PM

Good warning. It's the first thing I do when I set up a new account. I don't know why, but every host I've every seen has Anonymous FTP enabled as the default setting. Maybe it's because that's the way Cpanel is configured when they install it, but regardless, it is a setting that needs to be disabled unless you have a good reason to want it.

rosetrees · 05-20-2010, 01:56 PM

Edited - found it!

If anyone else is still looking - in my cpanel it isn't under files. It's in "ftp manager" - and then "setup anonymous ftp access"

Crew Chief · 05-20-2010, 02:01 PM

Quote:

Originally Posted by DeadGuy

As a courtesy Public Service Announcement... you need to be aware of this, if you have not already read about it. If you don't own a website, disregard this notice.

There have been numerous threads posted on the forum about site hacking, here is one way you can minimize it. Please check your Anonymous FTP settings. Go to your hosting account control panel, look for Anonymous FTP, and turn it off... like now! This is a major security hole and most hosting providers have this enabled by default.

Bluehost and other hosting providers have started issuing warnings about this setting, and it is a change that many simply are not aware of or overlook. Maybe this will help someone out there.

The only words I can use to describe this type of security breach is eerily dangerous.

@ DeadGuy, you have done more than a public service, you pretty much just saved the arses of a lot of IMers. I only wished that more people would read this thread, comprehend what they are reading and take the corresponding actions.

Quote:

Originally Posted by rosetrees

Sorry to be thick DeadGuy - can you give me some clues about where to find this in cpanel? Thanks

If you have cPanel, look for the "Files" and click on the "Anonymous FTP" ICON and untick the "Anonymous FTP" box and then click "Save"

Quote:

Originally Posted by esr

Thanks for the heads up. I never even thought about this. I just went in to my cpanel and there it was, plain as day, enabled.

If you use Hostgator, as I do, you'll want to check this out immediately.

Hostgators users, there's your warning... JUMP ALL OVER THIS! Don't get caught with your pants down.

WikiWarrior · 05-20-2010, 02:21 PM

Quote:

Originally Posted by DeadGuy

No problem. The Annonymous FTP is usually located in the "Files" section of the cpanel.

Cpanel must have been updated recently as I don't have a folder called 'File Manager'. I do however have a folder called 'Anonymous FTP' and both tick boxes are unchecked by default; one for access and one for upload.

Thanks for this tip though Deadguy. I bet it has helped many people. I had never even looked in this folder and wouldn't have thought to look even if I saw it.

WealthCoachPro · 05-20-2010, 02:53 PM

Cpanel

Service Configuration >> FTP Server Configuration

Ace Of Shirts · 05-20-2010, 02:58 PM

I use HostGator for close to 100 sites. I checked a couple and they were enabled.

Anyone know of a way to change it in all of them at once? Maybe in the WHM?

Thanks,

Dennis

WritingMadwoman · 05-20-2010, 03:09 PM

WOW - I have to say I have never seen or heard anyone mention this before! Just checked my main host and it's already deactivated, but will check the rest.

Thanks for posting this!

Wendy

Intrepreneur · 05-20-2010, 03:29 PM

Quote:

Originally Posted by rosetrees

Edited - found it!

If anyone else is still looking - in my cpanel it isn't under files. It's in "ftp manager" - and then "setup anonymous ftp access"

Top tip for finding things on a web page that seem to cheat your eyes.

Press Ctrl + F then search for the word on the page.

Elle Holder · 05-20-2010, 05:09 PM

Thanks for this!

I checked my HG CP and it wasn't allowed, but I also have an account with A Small Orange, and I did need to change my settings there.

PaulaC · 05-20-2010, 05:13 PM

My Hostgator account was unchecked so I guess it isn't all Hostgator accounts that have the problem.

Steven Wagenheim · 05-20-2010, 05:16 PM

Never knew, and mine was checked.

Thanks...We need more of these kinds of threads here.

rosetrees · 05-20-2010, 05:18 PM

Quote:

Originally Posted by Intrepreneur

Top tip for finding things on a web page that seem to cheat your eyes.

Press Ctrl + F then search for the word on the page.

How would that have helped??? It wasn't under file, which is where I was told to look, it wasn't on the main cpanel page either - I had to open a folder called
ftp manager. What do you suggest I should have searched for and where?

Sco · 05-20-2010, 05:58 PM

Thank you for the critical tip!

DeadGuy · 05-20-2010, 07:25 PM

The rape and pillage side of me told me to inform everyone that they needed to turn anonymous ftp on, or to buy my ecourse on "how to protect your website income" (for $497)... but I just couldn't bring myself to do it.

Glad to help.

franamico · 05-20-2010, 07:37 PM

Hey thanks so much! I'm going to do that right away!

Joseph Then · 05-20-2010, 08:04 PM

For warriors who have over 50+ accounts in one server and have a WHM, here's how you can do it:

Go to WHM: Main >> Service Configuration >> FTP Server Configuration.

ladyspinner · 05-20-2010, 08:25 PM

WOW! I would have never even thought to change this.

Thanks for the heads up!

Anthony La Tour · 05-20-2010, 08:29 PM

Great, thank your for the update.

Best Regards,
UFG

Don Schenk · 05-20-2010, 08:32 PM

Quote:

Originally Posted by Michael Oksa

In other words, the notices they are sending should say something like, "We have just changed all accounts to the off position for anonymous FTP. If you would like to have that feature enabled, you will have to[list of steps]."

At the very least, give a few days notice before the change so those that do use it wouldn't have an interruption of that feature.

All the best,
Michael

That is exactly what bluehost did. They explained the security problem and said that on a certain date they will turn it off.

:-Don

paolo83 · 05-20-2010, 08:39 PM

Dude, thanx for that!

i had a look to my hostgator cpanel and the thing was enabled...the site less than six months old so who knows how they setup things there, scary stuff.

You Rock!

Long Beach Nathan · 05-20-2010, 09:02 PM

Thanks, I should have thought about this, but would have guess that it was off anyways. Yep, it was on. I shut it off. Appreciated.

bydomino · 05-20-2010, 10:35 PM

What a great post!!! I manage over 1000 domains and I have seen non anonymous FTP get hacked. This is because when you authenticate on FTP your user name and password is sent plain text. The easy answer to this is sFTP or FTP over port 22. the "s" mean secure. This is not always available but if you have WHM and can SSH to your server then you can run sFTP and I recommend that you use it. Filezilla is a good free FTP app that supports sFTP

In many hosting environment you cannot run sFTP so this whole text user and password can be an issue. You can follow some simple rules

1) make difficult passwords
2) change them often

I hope this helps

All Night Cafe · 05-20-2010, 10:44 PM

I just checked and mine was checked. I just
disabled it. Thanks for the heads up.

Laura B · 05-20-2010, 11:01 PM

I can't thank you enough for posting this. I have had 5 sites on Host Gator hacked (3 just today), and now I know the likely reason why.

Quote:

Originally Posted by Joseph Then

For warriors who have over 50+ accounts in one server and have a WHM, here's how you can do it:

Go to WHM: Main >> Service Configuration >> FTP Server Configuration.

I can't find this in my WHM, although I have fewer than 50 accounts, but enough that I don't want to do them one by one.

dave147 · 05-20-2010, 11:31 PM

Quote:

Originally Posted by DeadGuy

As a courtesy Public Service Announcement... you need to be aware of this, if you have not already read about it. If you don't own a website, disregard this notice.

There have been numerous threads posted on the forum about site hacking, here is one way you can minimize it. Please check your Anonymous FTP settings. Go to your hosting account control panel, look for Anonymous FTP, and turn it off... like now! This is a major security hole and most hosting providers have this enabled by default.

Bluehost and other hosting providers have started issuing warnings about this setting, and it is a change that many simply are not aware of or overlook. Maybe this will help someone out there.

Thanks for sharing this info.

Quote:

Originally Posted by Steven Wagenheim

Never knew, and mine was checked.

Thanks...We need more of these kinds of threads here.

Yes there should be more like it

Barbara Eyre · 05-21-2010, 12:23 AM

Same here, the WHM [for my reseller account] -> Service Configuration -> FTP Server Configuration doesn't exist. Other than giving number to how many FTP accounts each package you set up can have, there is no other mention of FTP at all in my WHM.

Now where do I look?

Quote:

Originally Posted by Laura B

I can't thank you enough for posting this. I have had 5 sites on Host Gator hacked (3 just today), and now I know the likely reason why.

I can't find this in my WHM, although I have fewer than 50 accounts, but enough that I don't want to do them one by one.

Joseph Then · 05-21-2010, 12:47 AM

Quote:

Originally Posted by Barbara Eyre

Same here, the WHM [for my reseller account] -> Service Configuration -> FTP Server Configuration doesn't exist. Other than giving number to how many FTP accounts each package you set up can have, there is no other mention of FTP at all in my WHM.

Now where do I look?

Another easy way for you: Send a support ticket to your hosting support and tell them to disable anonymous FTP and set it to default for all your account/server.

Biggy Fat · 05-21-2010, 01:01 AM

I don't even see the following:

Quote:

Edited - found it!

If anyone else is still looking - in my cpanel it isn't under files. It's in "ftp manager" - and then "setup anonymous ftp access"

Quote:

WHM: Main >> Service Configuration >> FTP Server Configuration.

I do, however, see an anonymous FTP option under files, and both boxes were unchecked. Am I good? Great tip nonetheless.

SusanneUK · 05-21-2010, 01:55 AM

Anyone else using Hostgator Reseller manage to do this from the WHM yet?

I can't see where it is and looked all over - when I go to "Server Configuration" all I have as the next choice is "Basic Cpanel/WHM SetUp" and nothing else?

Any help appreciated,
Sue

SusanneUK · 05-21-2010, 09:26 AM

I had to get hold of HG Support in the end to put my mind at rest, these are the two relevent responses that apply to anyone with reseller hosting:

1st one:

Anonymous FTP is disabled on all of our shared and reseller servers by default, if someone connects anonymously, it will default them to a folder on the server that has no write, or execute perms. Unless you have specifically set it enabled.
Let us know if you have any questions.

2nd one because I did have a question:

Sorry for the confusion - it's technically 'enabled', but it's crippled to the point that it's disabled. Specifically, it's 'enabled' in that someone can FTP to the account anonymously, but it's disabled as in that's all they can do.

If I were to FTP to their account, I'd be put in one directory(public_ftp), and not have the ability to upload any files, nor navigate outside of that directory. I'm essentially jailed to that location. Should something be placed in public_ftp, I'd have the ability to download it, but that's it. So, it's 'enabled', but effectively 'disabled'.

Let us know if you have any other questions, and we'll be happy to help.
Cordially..

Hope that puts people's mind at rest on some areas of this.

Sue

Bicycle Cat · 05-21-2010, 09:29 AM

Good thing my hosting provider disables this by default!

Sandor Verebi · 05-21-2010, 10:45 AM

Hi Deadguy,

Thank you for your heads up, this is a very important and useful message.

People (including myself, too) may overlook such things oftentimes. Then we doesn't take it why we had a problem... LOL

Have a nice day,

Sandor
___________________
- nothing to sell now -

Groovystar · 05-21-2010, 04:58 PM

My host has anon FTP disabled by default. You actually have to pay to have it switched on. I would think most hosts disable it these days.

Pierre! · 05-21-2010, 06:38 PM

I took a look... and there was no Anonymous FTP icon!

Checked with the tech staff, and Jeff already has it *unavailable* over at ChrisFarrellMembership...

Jeff and his staff *ROCK* !

They spoil us over there...

L8ter...

bobsstuff · 05-22-2010, 12:42 AM

Thanks for the heads up.
I unchecked my Hostgator domains.
I could not find any settings at GoDaddy or 1and1.
Anyone have any ideas where the settings are on those other hosts?

05-20-2010, 08:47 AM	#1
DeadGuy HyperActive Warrior Join Date: Nov 2008 Posts: 251 Thanks: 5 Thanked 79 Times in 30 Posts	Your Pants Are Down... And Yes, This Is Going To Hurt As a courtesy Public Service Announcement... you need to be aware of this, if you have not already read about it. If you don't own a website, disregard this notice. There have been numerous threads posted on the forum about site hacking, here is one way you can minimize it. Please check your Anonymous FTP settings. Go to your hosting account control panel, look for Anonymous FTP, and turn it off... like now! This is a major security hole and most hosting providers have this enabled by default. Bluehost and other hosting providers have started issuing warnings about this setting, and it is a change that many simply are not aware of or overlook. Maybe this will help someone out there.
	You are making this work at home stuff way harder than it is. Ready for some sanity? Clear your head and start over.

05-20-2010, 10:07 AM	#2
Lou Diamond Senior Warrior Member War Room Member Join Date: Aug 2002 Location: Long Island N.Y. Posts: 1,152 Thanks: 28 Thanked 192 Times in 101 Posts	Re: Your Pants Are Down... And Yes, This Is Going To Hurt Hello, thanks for the heads up, I do not know why this setting is even allowed in this day and age.
	Something new soon.

05-20-2010, 10:13 AM	#3
DeadGuy HyperActive Warrior Join Date: Nov 2008 Posts: 251 Thanks: 5 Thanked 79 Times in 30 Posts	Re: Your Pants Are Down... And Yes, This Is Going To Hurt There are actually legitimate reasons that someone could use this with their internet business... like allowing their customers to upload things. There are other, much better ways to do that now. But back in the day when the internet was pristine, tecky an honest, who would have thunk? I agree with you wholeheartedly. The default position should be "OFF", not "ON".
	You are making this work at home stuff way harder than it is. Ready for some sanity? Clear your head and start over.

05-20-2010, 11:12 AM	#4
Joseph Then Senior Warrior Member War Room Member Join Date: Sep 2005 Location: Singapore Posts: 4,160 Thanks: 35 Thanked 237 Times in 141 Posts Social Networking	Re: Your Pants Are Down... And Yes, This Is Going To Hurt Thanks for the update. Good thing that my host turns it off by default. Whew!
	[WSO] Get 8 Of The MOST Effective Backlinking Services For Just $47!

05-20-2010, 12:24 PM	#5
rosetrees Carol War Room Member Join Date: Aug 2008 Location: UK Posts: 2,731 Blog Entries: 13 Thanks: 341 Thanked 731 Times in 514 Posts Social Networking	Re: Your Pants Are Down... And Yes, This Is Going To Hurt Sorry to be thick DeadGuy - can you give me some clues about where to find this in cpanel? Thanks
	Offliners - Client Guide to Editing a Wordpress Site Atahualpa Theme Tutorial. Available to promote via Clickbank Beginners Guide to SEO - Good, solid, grounding in SEO techniques

05-20-2010, 12:55 PM	#7
Michael Oksa The Ethical Marketer War Room Member Join Date: May 2006 Location: Wisconsin, USA Posts: 6,045 Thanks: 1,747 Thanked 3,000 Times in 1,331 Posts Social Networking Contact Info	Re: Your Pants Are Down... And Yes, This Is Going To Hurt I agree. It should be turned off by default. If it isn't already, then the host could certainly make it the default. In other words, the notices they are sending should say something like, "We have just changed all accounts to the off position for anonymous FTP. If you would like to have that feature enabled, you will have to[list of steps]." At the very least, give a few days notice before the change so those that do use it wouldn't have an interruption of that feature. All the best, Michael
	* * IT'S HERE! IT'S HOT * * . . . *The Ultimate* 2011 Christmas Holiday Package!**

05-20-2010, 01:36 PM	#8
esr HyperActive Warrior Join Date: May 2008 Location: Riverside, CA Posts: 408 Thanks: 21 Thanked 26 Times in 24 Posts Social Networking	Re: Your Pants Are Down... And Yes, This Is Going To Hurt Thanks for the heads up. I never even thought about this. I just went in to my cpanel and there it was, plain as day, enabled. If you use Hostgator, as I do, you'll want to check this out immediately.

05-20-2010, 01:46 PM	#9
DPM70 HyperActive Warrior Join Date: Feb 2010 Location: Bristol, UK Posts: 375 Thanks: 77 Thanked 39 Times in 34 Posts	Re: Your Pants Are Down... And Yes, This Is Going To Hurt I use hostgator and mine was not enabled. Having said that, my sites are less than a year old, so perhaps they have fixed it on newer accounts? Thanks for the heads up, though!
	I don't build in order to have clients. I have clients in order to build. - Ayn Rand

05-20-2010, 01:51 PM	#10
Dennis Gaskill Senior Warrior Member War Room Member Join Date: Jan 2008 Location: Wisconsin, USA. Posts: 4,113 Blog Entries: 2 Thanks: 2,405 Thanked 3,421 Times in 1,592 Posts Social Networking	Re: Your Pants Are Down... And Yes, This Is Going To Hurt Good warning. It's the first thing I do when I set up a new account. I don't know why, but every host I've every seen has Anonymous FTP enabled as the default setting. Maybe it's because that's the way Cpanel is configured when they install it, but regardless, it is a setting that needs to be disabled unless you have a good reason to want it.
	Three for FREE: Easy Web Site Money \| Marketing with Free Reports \| Profit Chains HTML Codes \| eBook Master Course CSS Made Easy \| Learn HTML \| HTML FAQ

05-20-2010, 01:56 PM	#11
rosetrees Carol War Room Member Join Date: Aug 2008 Location: UK Posts: 2,731 Blog Entries: 13 Thanks: 341 Thanked 731 Times in 514 Posts Social Networking	Re: Your Pants Are Down... And Yes, This Is Going To Hurt Edited - found it! If anyone else is still looking - in my cpanel it isn't under files. It's in "ftp manager" - and then "setup anonymous ftp access"
	Offliners - Client Guide to Editing a Wordpress Site Atahualpa Theme Tutorial. Available to promote via Clickbank Beginners Guide to SEO - Good, solid, grounding in SEO techniques

05-20-2010, 02:53 PM	#14
WealthCoachPro Active Warrior War Room Member Join Date: May 2010 Posts: 47 Thanks: 0 Thanked 3 Times in 3 Posts	Re: Your Pants Are Down... And Yes, This Is Going To Hurt Cpanel Service Configuration >> FTP Server Configuration

05-20-2010, 02:58 PM	#15
Ace Of Shirts Niche Custom Shirt Maker War Room Member Join Date: Mar 2003 Location: Fort Myers, FL , USA. Posts: 648 Thanks: 100 Thanked 79 Times in 58 Posts Social Networking	Re: Your Pants Are Down... And Yes, This Is Going To Hurt I use HostGator for close to 100 sites. I checked a couple and they were enabled. Anyone know of a way to change it in all of them at once? Maybe in the WHM? Thanks, Dennis
	MatchRate Plus <-- The BEST FREE HOME BUSINESS I've Ever Seen, Monthly Residual Income Promote ANY MLM: FREE MLM Reports \| Network Marketing CDs \| Network Marketing Shirts HOST WEBINARS ON FaceBook: Host Opportunity & Affiliate Webinars On Facebook OIOPUBLISHER Automatically Sell Advertising Space On Your Blogs & Keep ALL The Money! PREMIUM DOMAIN CLUB Sell Any Of OUR 500+ Premium Domain Names & Keep ALL The Profit

05-20-2010, 03:09 PM	#16
WritingMadwoman ... Madly Writing! War Room Member Join Date: Feb 2007 Location: USA Posts: 1,573 Blog Entries: 16 Thanks: 257 Thanked 162 Times in 110 Posts	Re: Your Pants Are Down... And Yes, This Is Going To Hurt WOW - I have to say I have never seen or heard anyone mention this before! Just checked my main host and it's already deactivated, but will check the rest. Thanks for posting this! Wendy
	QUALITY PLR DEALS: Squeeze Page Strategies PLR \| Work at Home PLR \| Create a Freelance Business PLR

05-20-2010, 05:09 PM	#18
Elle Holder HyperActive Warrior Join Date: Dec 2009 Location: Canada Posts: 235 Thanks: 90 Thanked 45 Times in 37 Posts	Re: Your Pants Are Down... And Yes, This Is Going To Hurt Thanks for this! I checked my HG CP and it wasn't allowed, but I also have an account with A Small Orange, and I did need to change my settings there.
	Trying to find a niche? Looking for niche ideas? Niche Initiation has what you need!

05-20-2010, 05:13 PM	#19
PaulaC HyperActive Warrior War Room Member Join Date: Jul 2009 Location: Australia Posts: 317 Thanks: 33 Thanked 283 Times in 69 Posts Social Networking	Re: Your Pants Are Down... And Yes, This Is Going To Hurt My Hostgator account was unchecked so I guess it isn't all Hostgator accounts that have the problem.
	My Blog --> Affiliate Blog Online Amazonian Profit Plan - JUST RELEASED! - Our Complete Blueprint for Making Money Online by Promoting Amazon Products - The Amazonian Profit Plan

05-20-2010, 05:16 PM	#20
Steven Wagenheim Content & Copywriting Wiz War Room Member Join Date: Dec 2006 Location: Roselle, NJ, USA Posts: 16,394 Blog Entries: 11 Thanks: 1,529 Thanked 6,185 Times in 2,282 Posts Social Networking	Re: Your Pants Are Down... And Yes, This Is Going To Hurt Never knew, and mine was checked. Thanks...We need more of these kinds of threads here.
	The 2nd Best Newsletter On The Web Next To Paul Myers Talk Biz News...Please See Paul's Sig For A Link To It

05-20-2010, 05:58 PM	#22
Sco "Sco" Riggs Join Date: Oct 2009 Location: North of San Francisco, CA. Posts: 45 Thanks: 10 Thanked 1 Time in 1 Post	Re: Your Pants Are Down... And Yes, This Is Going To Hurt Thank you for the critical tip!

05-20-2010, 07:25 PM	#23
DeadGuy HyperActive Warrior Join Date: Nov 2008 Posts: 251 Thanks: 5 Thanked 79 Times in 30 Posts	Re: Your Pants Are Down... And Yes, This Is Going To Hurt The rape and pillage side of me told me to inform everyone that they needed to turn anonymous ftp on, or to buy my ecourse on "how to protect your website income" (for $497)... but I just couldn't bring myself to do it. Glad to help.
	You are making this work at home stuff way harder than it is. Ready for some sanity? Clear your head and start over.

05-20-2010, 07:37 PM	#24
franamico HyperActive Warrior Join Date: Apr 2010 Posts: 199 Thanks: 0 Thanked 11 Times in 11 Posts	Re: Your Pants Are Down... And Yes, This Is Going To Hurt Hey thanks so much! I'm going to do that right away!
	Free Article, Press Release and Video Submission Desktop Application Instant Download

05-20-2010, 08:04 PM	#25
Joseph Then Senior Warrior Member War Room Member Join Date: Sep 2005 Location: Singapore Posts: 4,160 Thanks: 35 Thanked 237 Times in 141 Posts Social Networking	Re: Your Pants Are Down... And Yes, This Is Going To Hurt For warriors who have over 50+ accounts in one server and have a WHM, here's how you can do it: Go to WHM: Main >> Service Configuration >> FTP Server Configuration.
	[WSO] Get 8 Of The MOST Effective Backlinking Services For Just $47!

05-20-2010, 08:25 PM	#26
ladyspinner My Site spins & publishes War Room Member Join Date: May 2010 Location: NJ Posts: 119 Thanks: 0 Thanked 7 Times in 6 Posts Contact Info	Re: Your Pants Are Down... And Yes, This Is Going To Hurt WOW! I would have never even thought to change this. Thanks for the heads up!
	The Best SEO Hosting- When you need more IPs

05-20-2010, 08:29 PM	#27
Anthony La Tour HyperActive Warrior War Room Member Join Date: Apr 2010 Location: Stockton, CA Posts: 337 Thanks: 37 Thanked 61 Times in 35 Posts	Re: Your Pants Are Down... And Yes, This Is Going To Hurt Great, thank your for the update. Best Regards, UFG

05-20-2010, 08:39 PM	#29
paolo83 Active Warrior War Room Member Join Date: Oct 2009 Location: UK Posts: 72 Thanks: 36 Thanked 5 Times in 5 Posts	Re: Your Pants Are Down... And Yes, This Is Going To Hurt Dude, thanx for that! i had a look to my hostgator cpanel and the thing was enabled...the site less than six months old so who knows how they setup things there, scary stuff. You Rock!

05-20-2010, 09:02 PM	#30
Long Beach Nathan Word Arsenal Specialist!! War Room Member Join Date: May 2010 Location: TN Posts: 208 Thanks: 22 Thanked 10 Times in 9 Posts	Re: Your Pants Are Down... And Yes, This Is Going To Hurt Thanks, I should have thought about this, but would have guess that it was off anyways. Yep, it was on. I shut it off. Appreciated.

05-20-2010, 10:35 PM	#31
bydomino HyperActive Warrior War Room Member Join Date: Jul 2007 Location: CA , USA. Posts: 114 Thanks: 17 Thanked 22 Times in 19 Posts Contact Info	Re: Your Pants Are Down... And Yes, This Is Going To Hurt What a great post!!! I manage over 1000 domains and I have seen non anonymous FTP get hacked. This is because when you authenticate on FTP your user name and password is sent plain text. The easy answer to this is sFTP or FTP over port 22. the "s" mean secure. This is not always available but if you have WHM and can SSH to your server then you can run sFTP and I recommend that you use it. Filezilla is a good free FTP app that supports sFTP In many hosting environment you cannot run sFTP so this whole text user and password can be an issue. You can follow some simple rules 1) make difficult passwords 2) change them often I hope this helps
	I hope everyone is having a Great Day!!! I am here to help out and to be helped Everyone can use a helping hand now and then!! Great merchant account company

05-20-2010, 10:44 PM	#32
All Night Cafe Advanced Warrior War Room Member Join Date: Dec 2009 Posts: 655 Thanks: 10 Thanked 85 Times in 74 Posts	Re: Your Pants Are Down... And Yes, This Is Going To Hurt I just checked and mine was checked. I just disabled it. Thanks for the heads up.

05-21-2010, 01:55 AM	#38
SusanneUK Advanced Warrior War Room Member Join Date: May 2008 Location: Swansea, South Wales, UK Posts: 981 Thanks: 512 Thanked 182 Times in 123 Posts Social Networking Contact Info	Re: Your Pants Are Down... And Yes, This Is Going To Hurt Anyone else using Hostgator Reseller manage to do this from the WHM yet? I can't see where it is and looked all over - when I go to "Server Configuration" all I have as the next choice is "Basic Cpanel/WHM SetUp" and nothing else? Any help appreciated, Sue
	One-to-One WordPress Coaching Service Available at Low Hourly Rate - Let the frustration end now! WordPress Installs, Theme Design, Site Tweaks & other WordPress services available Last edited by SusanneUK; 05-21-2010 at 01:56 AM. Reason: typo

05-21-2010, 09:26 AM	#39
SusanneUK Advanced Warrior War Room Member Join Date: May 2008 Location: Swansea, South Wales, UK Posts: 981 Thanks: 512 Thanked 182 Times in 123 Posts Social Networking Contact Info	Re: Your Pants Are Down... And Yes, This Is Going To Hurt I had to get hold of HG Support in the end to put my mind at rest, these are the two relevent responses that apply to anyone with reseller hosting: 1st one: Anonymous FTP is disabled on all of our shared and reseller servers by default, if someone connects anonymously, it will default them to a folder on the server that has no write, or execute perms. Unless you have specifically set it enabled. Let us know if you have any questions. 2nd one because I did have a question: Sorry for the confusion - it's technically 'enabled', but it's crippled to the point that it's disabled. Specifically, it's 'enabled' in that someone can FTP to the account anonymously, but it's disabled as in that's all they can do. If I were to FTP to their account, I'd be put in one directory(public_ftp), and not have the ability to upload any files, nor navigate outside of that directory. I'm essentially jailed to that location. Should something be placed in public_ftp, I'd have the ability to download it, but that's it. So, it's 'enabled', but effectively 'disabled'. Let us know if you have any other questions, and we'll be happy to help. Cordially.. Hope that puts people's mind at rest on some areas of this. Sue
	One-to-One WordPress Coaching Service Available at Low Hourly Rate - Let the frustration end now! WordPress Installs, Theme Design, Site Tweaks & other WordPress services available

05-21-2010, 09:29 AM	#40
Bicycle Cat QuiteTired Warrior War Room Member Join Date: May 2010 Location: Australia Posts: 157 Thanks: 109 Thanked 18 Times in 16 Posts	Re: Your Pants Are Down... And Yes, This Is Going To Hurt Good thing my hosting provider disables this by default!

05-21-2010, 10:45 AM	#41
Sandor Verebi Senior Warrior Member War Room Member Join Date: Jun 2008 Location: Hungary Posts: 1,308 Thanks: 213 Thanked 212 Times in 151 Posts	Re: Your Pants Are Down... And Yes, This Is Going To Hurt Hi Deadguy, Thank you for your heads up, this is a very important and useful message. People (including myself, too) may overlook such things oftentimes. Then we doesn't take it why we had a problem... LOL Have a nice day, Sandor ___________________ - nothing to sell now -

05-21-2010, 04:58 PM	#42
Groovystar Advanced Warrior Join Date: Mar 2010 Posts: 557 Thanks: 18 Thanked 19 Times in 19 Posts	Re: Your Pants Are Down... And Yes, This Is Going To Hurt My host has anon FTP disabled by default. You actually have to pay to have it switched on. I would think most hosts disable it these days.
	Warrior cats is a Roleplaying Forum for the Warriors series! That's right, a fun game, and yes it is free! If you are into writing and roleplaying just come check it out. :)

05-21-2010, 06:38 PM	#43
Pierre! HyperActive Warrior War Room Member Join Date: Dec 2009 Location: Tucson, Arizona Posts: 154 Thanks: 68 Thanked 22 Times in 18 Posts	Re: Your Pants Are Down... And Yes, This Is Going To Hurt I took a look... and there was no Anonymous FTP icon! Checked with the tech staff, and Jeff already has it unavailable over at ChrisFarrellMembership... Jeff and his staff ROCK ! They spoil us over there... L8ter...
	Internet Safety Tips - The Essentials Internet Safety Tips – “The Essentials” – Examples Of Attacks Check out this chapter, then sign up to download YOUR copy!

05-22-2010, 12:42 AM	#44
bobsstuff Senior Warrior Member War Room Member Join Date: Jun 2005 Location: So Calif USA. Posts: 1,833 Thanks: 171 Thanked 56 Times in 36 Posts	Re: Your Pants Are Down... And Yes, This Is Going To Hurt Thanks for the heads up. I unchecked my Hostgator domains. I could not find any settings at GoDaddy or 1and1. Anyone have any ideas where the settings are on those other hosts?
	Bob Hale