CAWJames

Morning all, Woke up to a shedload of .html and rogue .php files in the root of one of our wordpress sites, mostly chinese pages selling fake bags! We run Sucuri and WordFence, and neither show any weaknesses, so how the poop did they manage to shove all these files into the root? I am at a loss, permissions locked to user only writing for directories and files, .htaccess present and correct: RewriteEngine On RewriteBase / RewriteCond %{REQUEST_METHOD} ^(HEAD|TRACE|DELETE|TRACK) [NC] RewriteRule ^(.*)$ - [F,L] RewriteCond %{QUERY_STRING} \.\.\/ [NC,OR] RewriteCond %{QUERY_STRING} boot\.ini [NC,OR] RewriteCond %{QUERY_STRING} tag\= [NC,OR] RewriteCond %{QUERY_STRING} ftp\: [NC,OR] RewriteCond %{QUERY_STRING} http\: [NC,OR] RewriteCond %{QUERY_STRING} https\: [NC,OR] RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR] RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|%3D) [NC,OR] RewriteCond %{QUERY_STRING} base64_encode.*\(.*\) [NC,OR] RewriteCond %{QUERY_STRING} ^.*(\[|\]|\(|\)|<|>|ê|"|;|\?|\*|=$).* [NC,OR] RewriteCond %{QUERY_STRING} ^.*("|'|<|>|\|{||).* [NC,OR] RewriteCond %{QUERY_STRING} ^.*(%24&x).* [NC,OR] RewriteCond %{QUERY_STRING} ^.*(%0|%A|%B|%C|%D|%E|%F|127\.0).* [NC,OR] RewriteCond %{QUERY_STRING} ^.*(globals|encode|localhost|loopback).* [NC,OR] RewriteCond %{QUERY_STRING} ^.*(request|select|insert|union|declare).* [NC] RewriteCond %{HTTP_COOKIE} !^.*wordpress_logged_in_.*$ RewriteRule ^(.*)$ - [F,L] Options All -Indexes Order allow,deny Deny from all Order allow,deny Deny from all Order allow,deny Deny from all Order allow,deny Deny from all Order allow,deny Deny from all Order allow,deny Deny from all Order allow,deny Deny from all Order allow,deny Deny from all # BEGIN protect xmlrpc.php order allow,deny deny from all # END protect xmlrpc.php # BEGIN WordPress RewriteEngine On RewriteBase / RewriteRule ^index\.php$ - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . /index.php [L] # END WordPress Everything owned by apache apache I assume I have a backdoor, is my only recourse to rebuild from core wordpress and import everything in from new and safe sources? Any insight? Thanks James

Very strange then, 5X and 6P are pure android and use the Gmail app for Exchange email. I am using that myself as it passes more info to the Pebble than Outlook does, but my users love Outlook on their Z3 Compacts!

I've got the 6P and its spot on, also got a Pebble Time tethered to it, and thats spot on too. Have you tried installing Outlook and using that?

That's annoying, I was looking forward to a thread about jamming old servers into an industrial crusher, pros and cons

I just had a crack in photoshop, mostly tracing with the pen tool! didn't come out half bad, although the other half was VERY bad, damn non straight corners. I think illustrator may be a better fit, oh well it is friday, and that means devoting a small amount of time to fun

That actually sounds like a better plan, have my script do the AD legwork, and then have the script I already have running for student assignment, do staff too. Muppet that I am, didn't think of something we already have in place!! Must be a friday

Nice use of the word "reverbie"

How the heck did you do that!! I assume it took hours of painstaking work?

Afternoon all, In my eternal quest to be able to script a new user(ie creates all ad accounts, adds to ricoh printer address book, etc etc), I have a question I cannot find an answer to: We use dirsync to sync our ad, so new users are automatically synced into O365, which is great, but I then have to go in and assign a licence, once sync has happened. What I want to do in the script is create the AD user, and then add the O365 licence straight away, but with dirsync I have to wait for the user to be created, so can I create both users in the script and not upset dirsync? Does that make sense? thanks James

Was just about to recommend Very, they put together a really good quote for us when we were shopping about for this type of kit.(PS Anthony, this is still on the cards, but authorization runs like mud!). We were looking at multiple thousands to equip each room for lecture capture, and they made that hundreds, just by finding cost effective solutions.

Ooh purdy hopefully its better than the really cacky Netgear PTV we have at the moment(needs a reboot before every use!)

Ah the vibrations, I used to run MiniDisc back in the day in mine. Read-ahead buffers X-reg disco v8 now, much more civilized!

Snap, I had one in my Defender too, 8" on the dash and a mini-itx motherboard in a special case that looked like a car amp. Moved it to my Mercedes and upgraded the motherboard to a new one with a custom double-din screen to fit in the dash all OEM-like. Cost an arm and a leg once you get the right PSU's, cases and miles of wire into the car, but priceless when the AA man looks in the car with his mouth open, with the immortal words,"Is your car running XP?" I would advocate tablets nowadays, much easier! I am getting a mount (brodit.se) for my Nexus in the new mini, then Bluetooth for sound. Don't fancy hacking up a new cars interior!

Go to Reports, then it should have a link to try the sneak preview of the new admin centre. Then click the graph icon on the left and Activations should be on the screen. Try that

There a few new reports in the Sneak preview of the admin centre, and one shows activation of ProPlus, broken down by Apple/PC etc, if that helps?

Also we would consider candidates who feel they have the right quality but not the right skills, and are willing to learn. Thanks James

Still open Bit of a stretch of the closing date. Thanks James

We use Gamma trunks over an FreePBX/Asterisk system. Just in the process of having our ISDN30 DDI's ported over. Such an easy way to do things! We looked at 3CX but the free version was too restrictive, and we find Asterisk/FreePBX is a great solution. Old DL360 G5 server and a download later, and we have been running SIP for over 2 years now, currently around 100 extensions.

Do you have the old admins email address, if so, attach to your own, retrieve the password and your in, or is that too simplistic? This is how I got access, although many moons and rotations ago!

We have 9 Ricoh MFP's of varying ages, from an ageing 2400 to a new 6003, all work well and I have worked plenty of ways to automate them, I have a powershell script that asks for name of user and ID number, it then creates a user and fires it off to all 9 over the VPN or LAN, takes about 30 seconds I can share if it helps anyone. We also used to have the drivers customised to show pop up for printing auth, but we now are rolling out PaperCut release stations so that is being removed slowly but surely. James

Work at CAW | CAW

If they sound like they know nothing, ask them to pass it their MS contact for clarification or mention that another reseller is sniffing around...usually makes them work harder

You need the free O365 Edu and then have added Office 365 Education Plus for students and Office 365 Education Plus for faculty these should be unlimited licences and include ProPlus. Talk to your licensing specialist, they should be able to add them to your O365 install. James

Hi all, A new post has been offered at our college, see below, when it goes live on our website, I will post a link, salary is disclosed on enquiry(sorry but its policy), Bev in HR is very nice and will let you know any further details: Due to our continued growth and investment in our IT systems we have a new position for an IT Support Technician based at our Huntingdon Centre. The role is the first line of support to users of the College IT systems and to maintain them to ensure consistent availability and also to improve the quality of user experience. Daily duties will include; occasional driving to and from our four centres across the UK, supporting staff on site and over the phone. Support will include the network, servers, printers & computers. Technical experience: •Microsoft Windows Server/Network Services installation and administration (Inc TCP/IP, DNS, Group Policy, DHCP) •Solid understanding of LAN & WAN network infrastructure including DNS, DHCP, WINS, TCP/IP, and Active Directory. •Exchange Server 2010/2013 •System Center 2012 R2 •ICT skills to a professional level in Microsoft packages (Windows, Office). •Strong communication skills as well as strong analytical and problem solving skills. This is an excellent opportunity for the successful candidate to develop their knowledge whilst getting involved in new projects, participating in the design and implementation of creative solutions and making a positive contribution in the quality of the IT services available. For further details or an application pack please contact [email protected] or telephone 01480 422060: All job applicants will undertake a Disclosure DBS Check. The College of Animal Welfare is committed to safeguarding and promoting the welfare of young people. The College undertakes not to discriminate unlawfully either directly or indirectly against a job applicant or one of its own employees. The College is committed to equal opportunities: appointments are open to members of the community on an equal basis.

Ah ok, but what actually is "Client Management Suite Client ML"? So I don't need a standard licence for my incidental servers then?