Page 1 of 1
Where are shoutbox comments stored?
Posted: Sat Mar 14, 2009 5:08 pm
by Joe Dobiecki-Davies
Hi,
I have installed the 'shoutbox sidebar' plugin on my website, and have found that people are repeatedly abusing it with malicious requests to try and upload shells to my server. Where would the shoutbox comments be stored (URL wise) so that I can see exactly who is posting these malicious requests. I cannot access the server because I don't own the server. Someone else looks after it for me.
regards,
-Joe
Re: Where are shoutbox comments stored?
Posted: Sun Mar 15, 2009 3:05 pm
by garvinhicking
Hi!
Shoutbox comments are stored in the Database, serendipity_shoutbox.
Regards,
Garvin
Re: Where are shoutbox comments stored?
Posted: Sun Mar 15, 2009 6:16 pm
by Joe Dobiecki-Davies
Re: Where are shoutbox comments stored?
Posted: Mon Mar 16, 2009 9:37 am
by garvinhicking
Hi!
What do you mean? The shoutbox plugin is embedded into serendipity, so it appears on all your blog pages...?!?
Regards,
Garvin
Re: Where are shoutbox comments stored?
Posted: Mon Mar 16, 2009 1:03 pm
by Joe Dobiecki-Davies
for example,
In 'shoutpro' the comments are stored in a file called: shouts.php.
e.g.
http://www.cutekc.com/shoutpro/shouts.php (real site)
Regards,
-Joe
Re: Where are shoutbox comments stored?
Posted: Mon Mar 16, 2009 1:41 pm
by garvinhicking
Hi!
Yeah. In serendipity, they are stored in the database table serendipity_shoutbox. You need to use a tool like phpMyAdmin to access database tables.
Regards,
Garvin
Re: Where are shoutbox comments stored?
Posted: Mon Mar 16, 2009 5:50 pm
by Joe Dobiecki-Davies
Hi,
Would I need server access to grab the URL where they are stored?
Regards,
-Joe
Re: Where are shoutbox comments stored?
Posted: Tue Mar 17, 2009 11:17 am
by garvinhicking
Hi!
There IS NO URL.
The DATA IS STORED IN A DATABASE.
You might want to lookup Wikipedia for "MySQL" or "database". Also lookup "phpMyAdmin", it is the tool of server access of choice that you can use to manage database tables.
Best regards,
Garvin
Re: Where are shoutbox comments stored?
Posted: Tue Mar 17, 2009 5:17 pm
by judebert
Wooo, Garvin must be reeling from the anesthesia.
You want a URL to a file where the comments are listed, right? But there's no such thing in s9y. We lovingly insert each comment into a database instead, and carefully extract only the ones we need whenever we need them.
That means we don't have to depend on file permissions, or disk access times.
Unfortunately, you can't read a database the same way you can a file. It's not accessible through a simple URL. You need a database tool. Most hosting services provide such a tool. In the case of a MySQL database (the most common), the most common tool is phpMyAdmin. It lets you read the database through your web browser. The URL to the phpMyAdmin tool is known only by your hosting service, and it'll probably require you to know your database credentials.
Once you can see the database, go look at the serendipity_shoutbox table. Each comment is a separate record in that table.
Re: Where are shoutbox comments stored?
Posted: Tue Mar 17, 2009 7:42 pm
by MrPotatoes
garvinhicking wrote:Hi!
There IS NO URL.
The DATA IS STORED IN A DATABASE.
You might want to lookup Wikipedia for "MySQL" or "database". Also lookup "phpMyAdmin", it is the tool of server access of choice that you can use to manage database tables.
Best regards,
Garvin
lmao-irl
Re: Where are shoutbox comments stored?
Posted: Wed Mar 18, 2009 5:44 pm
by Joe Dobiecki-Davies
Ok. Thanks.