wolstech

You're part of this case: https://helionet.org/index/topic/62839-krydos-request-for-account-reactivation/ We're still waiting for more information on that from the original poster there, but to summarize the issue, it appears you're part of a university class and our system thinks everyone at the university is one person due to the shared network and PCs. Is that correct?

No, that's a system folder. It's used by the PHP composer tool. You can ignore it.

ModuleNotFoundError: No module named 'StringIO': /home/alewis.helioho.st/httpdocs/savagephotos/sendthumb.cgi That's your issue. Looks like io.BytesIO is the replacement based on a quick google.

The pillow module is already available on 3.12 but is not installed for 3.9. Which Python version are you using (not at a PC so can’t look at the file again right now)?

Your account moved to the new Tommy on September 27th, and the old Tommy2 server was retired shortly thereafter.

This topic is from 3 months ago. Are you experiencing the same issue as the original poster?

When was the last time this worked? I ask because looking at the index.cgi for savagephotos, it's shebang line is looking for Python 2.7 which hasn't been available since the Tommy migration (server only supports 3.9 and 3.12 now).

Merged posts. It's because our system thinks the entire class is one person. Please follow this topic for updates: https://helionet.org/index/topic/62839-request-for-account-reactivation/

Krydos can assist with this. Escalating:

I just saw you were blocked in the firewall and were already unblocked in this topic: https://helionet.org/index/topic/62843-no-access-whatsoever/ ...that explains why I didn't see you in there. Try it now. This topic is not the best place for support anyway. Please use the topic above for continued discussion of your issue.

I've gone ahead and unsuspended devlab in the meantime, and once I hear back about the whitelisting I'll see about getting the other accounts unsuspended as well (which look to be the students, some have emails like s######@usls.edu.ph).

I've asked about this in a staff channel for you. It looks like you and your students all got flagged for multiple accounts because our system thinks they all belong to one person. I'm looking into whether we can just whitelist usls.edu.ph so accounts from the university don't get flagged for this.

What happens if you try accessing the server directly with no VPN at all? We cannot guarantee or provide support for any third party VPN services, and since you claim that most VPNs in Europe are affected, there could be something like a regulatory reason that prevents them from working (I wouldn't be surprised especially with the EU...). Nobody else is reporting issues though, which makes me think it's a problem with your network connection, PC, or the ISP you use.

Please check your PMs for information regarding your Lily account.

DKIM, SPF, and DMARC have been set up for the domain mailzify.com. We recommend sending a test email to https://www.mail-tester.com/ to make sure that everything is set up correctly. If you get less than a 10/10 score please post a link to the full report so we can help you fix any other issues that there may be. Please keep in mind also that we have a sending limit of 50 emails per day.

We can't control the versions of software available through Softaculous. You can update the app manually using Drupal's own update methods, but there's no guarantee that Softaculous will be able to manage it when the version installed is newer than the version in Softaculous.

We've had this happen before with other users and have never found a fix besides starting over with a fresh account. It's caused when the files in the git folder are deleted manually or become corrupt. Do you want me to reset your account so you can start over?

Domain added. It can take up to 2 hours to work.

Krydos will need to look at this since its a VPS issue.

Since this account was suspended purely based on its appearance and not due to actual phishing, you've been unsuspended. Please remove all ebay branding from the site within 24 hours, and do not use the likeness of a major website when designing things like this in the future. Doing so violates the terms of service for illegal activity as well as phishing, and will result in a ban.

You were banned for phishing because your site was impersonating eBay. Can you explain?

Glad to hear the manual reset worked. I'll have someone check into the password reset system to verify it is working properly. Thanks for letting us know. Please let us know if you need anything else.

They don't look hacked based on what I can see. No malware files or anything. I wouldn't be surprised if they just got slammed by bots. WP is extremely inefficient and causes tons of load when serving pages, so an unexpected spike in traffic can easily cause this. Since it was almost a month ago at this point, there isn't much in terms of useful data in the logs. I've just gone ahead and unsuspended you. If it happens again, we'll have fresh logs to review for a solution.

No, the FTP access and multcloud stuff has nothing to do with being hacked. Wordpress or one of its plugins has a security vulnerability that was abused by a hacker to get in and plant the malware files. WP is well known to be full of security issues. Keeping it up to date and not using themes and extensions from questionable websites (some dubious sites offer "free" themes and extensions that include a backdoor) can help with this, but just not using WP is the only surefire way to prevent its exploitation.

I don't see anything in the logs showing that you ever successfully reset the password...I'm guessing the emails ended up in the spam folder or promotions tab. I've manually sent you a link to change the password. Please try changing it that way and let me know if it still doesn't work after that. Please keep in mind also that passwords cannot contain accented characters, non-English characters, spaces, or similar.