DDOS Attack causing Database connection error [closed] - database

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 6 years ago.
Improve this question
I have hosted my Prestashop at Fastdomain server it's like the 4th year, the website is stable and working fine till 3 days ago where my email inbox got full of spam and more than 300K requests on the site causing the site to go down.
I activated the basic protection from Sitelock provided from Fastdomain Cpanel, it worked fine for two days and the site is down again cuz of another strike.
Fastdomain support tried to fix it but no instant method they said the problem is caused due to script overuse in send to friend module, even though this module is an original PrestaShop module, and they said the website will "recover" in few hours.
any comment or thoughts? how t respond to such attack!?
my website is elektrojo.com and am using the up to date version

This appears to be a common problem. Not only is it taking your site down, it may be being used to spam others, which has the risk of getting your domain blacklisted.
In that thread was linked an updated version of the module supporting a CAPTCHA, along with a similar modification for product reviews. It seems to be for PrestaShop 1.5 and 1.6.
If you have some kind of a "backend" which you can update modules on, you should also do that.
Another suggestion is to use fail2ban to detect repeated attempts to access this feature and block it. You may not have the necessary access to do that, but if not, your hosts should be able to.
Failing that, you should remove the sendtoafriend code (ensure the files are actually gone from their original location) until you have found a way to harden it, since it's being abused to take your site down.

Related

Selenium and Amazon Captcha [closed]

Closed. This question is not about programming or software development. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed yesterday.
Improve this question
I'm running code in selenium to check for lower price on an item on Amazon. Once my target price hits, my code executes and once my account is logged, Amazon asks for log in again with a captcha. Now, I have the same code running on another PC and it executes fine without any captcha.
I've deleted all the User Data for Chrome, uninstalled Chrome with All data from the uninstaller, and clear any cookies or settings, but once I install Chrome again, I get the same captcha error.
Does any know where Amazon might be storing this information in order for me to clear it? Could is possible it's somewhere in regedit?
Reinstalled Chrome, Deleted all data from User Folder.
Provide your code, otherwise we can't help you.
Possible solutions:
If it's a Chrome WebDriver, you are in developer mode and any website can read it.
You are talking about YOUR information, however, Amazon may also have restricted your account for inappropriate use. These companies detect this type of conduct VERY easily.
Try to store cookies and avoid multiple logins.

Logging in Reactjs [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
We don’t allow questions seeking recommendations for books, tools, software libraries, and more. You can edit the question so it can be answered with facts and citations.
Closed 1 year ago.
Improve this question
I am working on ReactJS for developing a client side of an application, there are very few options available for client side logging as compared to server side on of them which I came across is log4js it has appenders. But are there any other options available? I've used Winston on server side few months ago, can we use such libraries on client side as well? The issue here is I'll have to remove these logs completely before taking this code to production, so I guess I'll use webpack's module for it. But log4js seems to be an overhead so what all alternatives can be used?
I am facing a similar problem at our end. So far I have came across the following options which may be of help:
log Level:
Logs at different levels, easy to setup, somewhat similar to bunyanJs and WinstonJS which are used in the backend Nodejs servers.
loglevel-plugin-remote - extension of log level but pushes logs to server after specified interval. There are in fact quite a few more options there
It has been almost 4 years since I've asked this question, and now looking at the choices available in market we've decided to go ahead with application monitoring/tracking systems such as sentry for logging the event. We can build a wrapper around the SDK of such services and log the events to track the issue.
Another option was to build our own service, but considering the product in mind the maintenance cost of our own service would have been much more, so we sticked with sentry. There are many other similar options available as well for logging on frontend as well as backend.

Working graph server setup for use with Python3 [closed]

Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 6 years ago.
Improve this question
I'm solving a problem that seems most appropriately handled by a graph database, so I wanted to get a graph database server up and running, and go from there. I'm a Python developer, so I was trying to get something running with the bulbs library, which seems mature and effective, based on the documentation.
Unfortunately, I haven't been able to find any monolithic guide that covers everything between bulbs and an actual graph database server, and my attempts to cobble together working versions have been hampered by a number of compatibility problems.
I feel like I might be missing something intrinsic to the design of these systems. I'm used to postgresql, MariaDB, and other systems which are a pretty simple two-layer model, bridged by a standard API. It seems like the Apache Tinkerpop stack should be what I want, but Rexster seems like it's a server, but not a storage backend, so I still need one of those? I'm a little confused, because Neo4j and Titan seem like they're also servers, in addition to storage backends, so I don't know why Rexster is necessary. Right now, I'm trying to get Neo4j to work with bulbs, but the Gremlin plugin is missing... I've spent more than a day trying to piece this software stack together, and I'm getting really close to just giving up and building a million mapping tables in an ORM.
Is there a monolithic installation guide that I can follow somewhere, or has anyone had experience getting this working in a sane amount of time? I can use any solution deployable on Fedora, Debian, or OpenBSD.
Your question is too broad to provide a good answer. Briefly, I will say that you are not going down a good path. Bulbs is no longer developed. Rexster is TinkerPop 2.x which is a line of code that is no longer maintained. Please see the TinkerPop web site which as the full listing of current python related libraries for 3.x. However, before you even do that or worry about Titan or Neo4j, you should focus your time on learning the TinkerPop stack itself. Read the Getting Started tutorial. Get comfortable with the Gremlin Console. Play with GremlinBin a bit. Then get into the details of the reference documentation. If you start more slowly, you will likely have more success.

Is it possible to get the list of google blacklisted domains? [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 7 years ago.
Improve this question
I know that browsers use Google safe browsing service to detect if a domain is blacklisted or not. The client(for example Firefox) basically downloads a hashed list of these domains and then checks if a url is blacklisted or not. My question is that, is it possible to access this list of domains?(not their hash values which is not reversible)
I worked in a company in which we were doing web filtering. We were doing also category based filtering like not allow gambling websites or adult etc..
I didn't see open version of Google safe browsing urls when I were working . Instead we had several sources but best free source was as I remember http://www.urlblacklist.com/ . Which has like 1.5 million websites categorized.You can filter out urls under categories like Adult-Gambling etc....
I don't know if you only asking for the Google blacklist, but since Kafka Erdem Damir suggested another list, a few friends of mine used the "shallalist". Unfortunately it's a German service.
http://www.shallalist.de

Bug in Developers Console when accepting invitation to add Cloud Platform project [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 8 years ago.
Improve this question
Well, it would seem that Google only provide support for Cloud Platform through here, which seems a bit odd, as I've tried to report a bug via their ticketing system only to have it closed with a forward to the Google Product forums, which then got me sent to the slightly-useless Support tab within Cloud Platform itself as there's no forum for Cloud Platform (srsly?), which states "Google engineers monitor and answer questions via Stack Overflow." You'd think they'd have a bloody bug tracker…
Anyway, this is what I submitted via the ticketing system. I'm expecting this to get closed pretty quickly as off-topic, but maybe one of you lot knows where their bloody bug tracking stuff actually is. I can't for a minute believe that they don't have one! >.<
--
Original bug report:
I have discovered a bug in the Google Developers Console (https://console.developers.google.com) regarding the Cloud Platform. When accepting an invitation from another developer to add a project to your console with a Google Apps for Business account which does not yet have any projects created against it (IE, it is a new account), the invitation request process throws the error "You have no more apps available to accept this invitation".
If the user then creates an app against their account directly, then initiates the invitation process, the invitation is accepted as expected, and the project is added to the account as normal. The directly-created project can now be removed, and future invitations work as normal. If all projects are then removed from the apps account, the error "You have no more apps available to accept this invitation." returns again until such time a directly-created project is added.
--
As I said, I'm expecting this to get closed pretty quickly, so if anyone knows where Google's Developers Console bugs should actually be submitted, I'd appreciate it if you could let me know before closing it, as I would expect this post to come up in searches for this bug, and a pointer in the right direction on where to go for support would be of help to me and anyone who comes across this post.
Cheers.
Use Send Feedback link at the right-bottom corner of the Cloud Console:
https://console.developers.google.com/project

Resources