rescuestat
04-19-2009, 07:14 PM
We've been customers of BH for almost 2 years with never any problems and always had great service, until now. Not complaining, but I'm at a lose and really need help.
Just some quick background, we discovered a virus on our site 2 weeks ago and we totally cleaned the site. We notified BH customer support just incase it may have been a server issue and so they could check the rest of the server's customers. BH customer service ran what they called a "security script" on our website to supposedly check for any files/directories that had incorrect permissions. After this script was run, our website would no longer process credit card transactions. Through several days worth of work, contacting BH customer service & our CC processor, we've determined that $HTTP_POST's are being blocked by our site. BH insists that their "security script" didn't change anything other than permissions, but something else apparently has been changed. I've already found several small mistakes regarding permissions being changed to improper values by this "security script". BH verified that the IP address/port of our CC processor is in the clear as far as the firewall goes, but still nothing's getting through. BH customer service insists it outside of BH and hasn't been extremely helpful or active in helping to solve the problem.
Does anyone any ideas where to look for this problem or even a way to prove to BH customer service that it is indeed their "problem" so they would be willing to help solve it.
Any direction or advice would be greatly appreciated.
UPDATE: Problem solved: found .htaccess with incorrect permissions in script directory
Just some quick background, we discovered a virus on our site 2 weeks ago and we totally cleaned the site. We notified BH customer support just incase it may have been a server issue and so they could check the rest of the server's customers. BH customer service ran what they called a "security script" on our website to supposedly check for any files/directories that had incorrect permissions. After this script was run, our website would no longer process credit card transactions. Through several days worth of work, contacting BH customer service & our CC processor, we've determined that $HTTP_POST's are being blocked by our site. BH insists that their "security script" didn't change anything other than permissions, but something else apparently has been changed. I've already found several small mistakes regarding permissions being changed to improper values by this "security script". BH verified that the IP address/port of our CC processor is in the clear as far as the firewall goes, but still nothing's getting through. BH customer service insists it outside of BH and hasn't been extremely helpful or active in helping to solve the problem.
Does anyone any ideas where to look for this problem or even a way to prove to BH customer service that it is indeed their "problem" so they would be willing to help solve it.
Any direction or advice would be greatly appreciated.
UPDATE: Problem solved: found .htaccess with incorrect permissions in script directory