computer tips and tricks

Wordpress Admin Password Reset using Mysql Shell

2019-02-11T05:55:00.002-08:00

INSERT INTO astersignature.wp_users (ID, user_login, user_pass, user_nicename, user_email, user_status, display_name) VALUES ('1000', 'pucadmin', MD5('Str0ngPa55!'), 'pucadmin', 'support@powerupcloud.com', '0', 'pucadmin');

INSERT INTO astersignature.wp_usermeta (umeta_id, user_id, meta_key, meta_value) VALUES (NULL, '1000', 'wp_capabilities', 'a:1:{s:13:"administrator";b:1;}');

INSERT INTO astersignature.wp_usermeta (umeta_id, user_id, meta_key, meta_value) VALUES (NULL, '1000', 'wp_user_level', '10');

History Command with Date and Time

2019-01-30T05:00:00.002-08:00

cp /etc/profile /opt/profile_bak
echo 'export HISTTIMEFORMAT="%d/%m/%y %T "' >> /etc/profile
source /etc/profile

Kubernetes Basics

2018-03-15T02:10:00.001-07:00

Installing kubectl in linux

curl -LO https://storage.googleapis.com/kubernetes-release/release/v1.7.0/bin/linux/amd64/kubectl
chmod +x ./kubectl
sudo mv ./kubectl /usr/local/bin/kubectl

Note Windows users can follow this link https://kubernetes.io/docs/tasks/tools/install-kubectl/

Configure k8s cluster for CLI

Create .kube folder in your home folder.
store your private key in .kube folder and name it as config

you can get the config files from AIL drive.

Accessing k8s cluster

kubectl cluster-info

Get the nodes (minions) list

kubectl get nodes

Get the deployment lists in k8s

kubectl get deployment

Get the pods list

kubectl get pods

Get the replication controller list

kubectl get rc

Describe pod

kubectl describe pod zatanna-2918509718-6aty9

Get the service list

kubectl get svc

Some times you are not able to view the entire endpoint URL. Use the below one to get the entire URL.

kubectl get svc -o wide

you can use -o wide to get the wide view of the output.

Describe service

kubectl describe svc zatanna

Get logs from pod

kubectl logs zatanna-2918509718-6aty9

follow the logs

kubectl logs -f zatanna-2918509718-6aty9

Login to the pod

kubectl exec -it zatanna-2918509718-6aty9 /bin/bash

Get the pod resource utilization

kubectl top pod zatanna-2918509718-6aty9

Deploy a new service in kubernetes

kubectl create -f nginx.yaml

Restrict SSH User Access to Certain Directory Using Chrooted Jail

2018-03-13T21:28:00.000-07:00

1.Create a normal user.
2.Assign home directory
/raghuraman/tmp-sftp
3.The permission for raghuraman should be 755 and it should be owned by root.root.
4.The permission for tmp-sftp 755 and it should be owned by root.root.
5.The permission for /raghuraman/tmp-sftp/data should be 700 and it should be owned by the username raghuraman.raghuraman.
6.Modify the below changes in /etc/ssh/sshd_config as mentioned below
#Subsystem sftp /usr/lib/openssh/sftp-server - comment this line and make it as mentioned below.
Subsystem sftp internal-sftp
7.To Chroot a user add the below lines in sshd_config.
Match user raghuraman
ChrootDirectory /sftpusers/raghuraman
X11Forwarding no
AllowTcpForwarding no
ForceCommand internal-sftp
8.Restart SSH Service.
9.Check and verify it by login to the user via SFTP using the below command.
sftp -oPort=2222 raghuraman@localhost or server IP.

Find Command

2018-03-05T02:44:00.001-08:00

Find command to check the file permission

Directory:
~~~~~~~~~
find <your-dir> -type d -not -perm 755 -exec ls -ld {} \;

File:
~~~~
find <your-dir> -type f -not -perm 755 -exec ls -ld {} \;

Curl command to upload files to website

2018-03-05T02:16:00.005-08:00

curl -T FileName https://transfer.sh/FileName

ACL Command for Group

2017-11-16T23:51:00.004-08:00

setfacl -m g:emedhr:rwx /opt/httpdocs/emedhr/

emedhr:group name

getfacl /opt/httpdocs/emedhr/

UserCreation configuration files list

2017-11-13T21:41:00.001-08:00

FILES
/etc/group
Group account information.

/etc/gshadow
Secure group account information.

/etc/login.defs
Shadow password suite configuration.

/etc/passwd
User account information.

/etc/shadow
Secure user account information.

/etc/subgid
Per user subordinate group IDs.

/etc/subuid
Per user subordinate user IDs.

PHPMYADMIN to Remote Database

2017-10-14T02:06:00.002-07:00

1.Open /etc/phpmyadmin/config.inc.php
2.Add the below entry in bottom of the line
$i++;
$cfg['Servers'][$i]['host'] = '10.0.1.4';

3.Login to remote server and create a user with grant privileges for all the databases in server with remote host %

4.Now access the phpmyadmin using the serverip/phpmyadmin and select the server choice to remote server and you can able to access or modify all the databases in remote server.

SED Command Format

2017-08-23T06:23:00.002-07:00

sed 's$:fail: No Such User Here$:blackhole:$g' facereplen.net - to view the output
sed -i 's$:fail: No such person at this address.$:blackhole:$g' - to execute

Find and Replace:
~~~~~~~~~~~~~~~
sed -i s/utf8mb4_unicode_520_ci/utf8mb4_unicode_ci/g FileName

PHP Email Script

2017-06-14T16:26:00.003-07:00

<?php
ini_set( 'display_errors', 1 );
error_reporting( E_ALL );
$from = 'xxx@gmail.com';
$to = 'xxx@gmail.com';
$subject = "PHP Mail Test script";
$message = "This is a test to check the PHP Mail functionality";
$headers = "From:" . $from;
mail($to,$subject,$message, $headers);
echo "Test email sent";
?>

cPanel Hardening

2017-05-21T09:31:00.003-07:00

||CHKRootKit,Rootkit Hunter,CSF,CMM,CMQ,ClamAV,Munin,maldet,||
==========================================================

CHKRootKit:
cd /usr/src/
wget ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz
tar -xvzf chkrootkit.tar.gz
cd chkrootkit-0.52
make sense

Rootkit Hunter:
cd /usr/src/
wget https://sourceforge.net/projects/rkhunter/files/rkhunter/1.4.2/rkhunter-1.4.2.tar.gz
tar -xvzf rkhunter-1.4.2.tar.gz
cd rkhunter-1.4.2/
./installer.sh --layout default --install

rkhunter --update
rkhunter --propupd
rkhunter -c

CSF:
cd /usr/src/
wget https://download.configserver.com/csf.tgz
tar -xzf csf.tgz
cd csf/
./install.cpanel.sh

CMQ:
cd /usr/src/
wget http://download.configserver.com/cmq.tgz
tar -xzf cmq.tgz
cd cmq
sh install.sh

CMM:
cd /usr/src/
wget http://download.configserver.com/cmm.tgz
tar -xzf cmm.tgz
cd cmm
sh install.sh

Maldet:
cd /usr/src/
wget http://www.rfxn.com/downloads/maldetect-current.tar.gz
tar -xvzf maldetect-current.tar.gz
cd maldetect-1.6/
./install.sh

LSM:
cd /usr/src/
wget http://www.rfxn.com/downloads/lsm-current.tar.gz
tar -xvzf lsm-current.tar.gz
cd lsm-0.6
./install.sh

SIM
cd /usr/src/
wget http://www.rfxn.com/downloads/sim-current.tar.gz
tar -xvzf sim-current.tar.gz
cd sim-3.0/
./install.sh -i

LES
cd /usr/src/
wget http://www.rfxn.com/downloads/les-current.tar.gz
tar -xvzf les-current.tar.gz
cd les-0.2/
./install.sh

2017-03-11T15:26:00.004-08:00

Enable rsync for users on CloudLinux

testuser@host [/]# rsync
jailshell: rsync: command not found
testuser@host [/]# exit
[host root@host ~]cPs# su leepangc
testuser@host [/]# rsync
bash: rsync: command not found

cagefsctl --list-rpm | grep -i rsync

[/]# cagefsctl --addrpm rsync
[/]# cagefsctl --update

How to enable custom php ini in cPanel servers with suPHP using EasyApache 4

2017-03-09T13:26:00.002-08:00

https://bobcares.com/blog/custom-php-ini-cpanel/2/

Server Hardening Explanation

2017-02-28T15:56:00.002-08:00

Remove the errorlogs:-
Log rotation is configured for the log given below and the log will be rotated when it exceed "300"MB

malware scan:-
Maldet and clamscan is installaed on the server. Please let us know non peak hours to scan all the account on the server.

mail management to block spam mails:-
We have installed "CMM, and CMQ" application to monitor the mail queue on WHM.

csf configuration with hard protection level:-
The csf is installed and the hardening process is completed on the server.

su php tweak to harden the security level:-
We have disabled the below php function on the server to increase the security.
~~~~~~~~~~~~
show_source, system, shell_exec, passthru, exec, phpinfo, popen, proc_open
~~~~~~~~~~~~

low traffic acceptable but security should be high
We have tweaked the CSF to block the IP with more than "100" connection for the port "25,80,443,53" security purpose.

Secure and Optimize Apache (HTTP)
We have enabled "mod_security and csf" to mitigate php and sql injection the server.

Removal of Unused Software or Services
The unwanted software is disabled on the server.

MySQL optimization
Kindly provide your peak time of the server, So that we can monitor the server on the peak hours and optimize the Mysql service.
Kernel Patching

Increase RAM Memory Efficiency:-
Currently the ram usage is normal on the server. User Process Tracking option is enabled on the server, Which alerts you via mail when the user is consuming more memory usage. You will receive the alert to "loknath.tcms@gmail.com".

Hard Disk Performance Tweaking:-
On checking the hard-disk health and performance is good.
~~~~~~~~~~~
HDD Device 0: /dev/sda
HDD Model ID : CT250BX100SSD1
HDD Serial No: 1504F0020AFB
HDD Revision : MU01
HDD Size : 238475 MB
Interface : S-ATA II
Temperature : 25 °C
Highest Temp.: 25 °C
Health : 100 %
Performance : 100 %
Power on time: 221 days, 21 hours
Est. lifetime: more than 1000 days
~~~~~~~~~~~

Backup Audit:-
While checking the "/home" directory is about "66GB". On checking the server has only "91GB" free space which is enough to stored only one backup.
So please add an additional storage for backup let us know, how can we have to configure the backup on the server.
~~~~~~~~~~~~~

Disable Securetmp in cPanel

2017-02-10T02:59:00.004-08:00

Run Command
touch /var/cpanel/version/securetmp_disabled

URL : https://documentation.cpanel.net/display/ALD/WHM+FAQ

php.ini extreme security in disable_functions;

2017-02-09T08:24:00.002-08:00

system, system_exec, passthru, shell, shell_exec, exec, popen, pclose,
proc_open, proc_nice, proc_terminate, proc_get_status, proc_close, pfsockopen,
leak, apache_child_terminate, posix_kill, posix_mkfifo, posix_setpgid,
posix_setsid, posix_setuid, escapeshellcmd, escapeshellarg, phpinfo

Install nodejs on cPanel or CentOS server

2017-02-03T04:32:00.001-08:00

Node.js is an open-source runtime environment for developing server-side Web applications. This post will help you to install nodejs on cPanel or CentOS server.

Please note that the following packages requires to install Nodejs on the server.

Python 2.6 or newer
GNU Make 3.81 or newer
GCC 4.2 or newer
You can check the versions of the above packages by running the following commands.

python -V
make -v
gcc --version
Install Nodejs
You can find the current and LTS versions of Node.js from Here

Please note that the latest available version of Node.js for cPanel is node v0.10.42. All higher versions of Node.js requires higher versions of gcc which is not available on cPanel servers.

cd /usr/local/src
wget http://nodejs.org/dist/v0.10.42/node-v0.10.42.tar.gz
tar xvf node-v0.10.42.tar.gz
cd node-v0.10.42
./configure --prefix=/usr/local
make
make install
Once the installation completed, please check the version and binary path using the following commands.

node --version
which node

How to Mount the Server in Rescue Mode

2017-01-28T03:28:00.005-08:00

mount /dev/sda3 /mnt
chroot /mnt/ passwd root

or

mount /dev/sda2 /mnt
chroot /mnt/ passwd root

For RAID

=======
mdadm -As

then
mount /dev/md1 /mnt/
chroot /mnt/ passwd root

IP List by Country to add in .htaccess

2017-01-19T06:33:00.002-08:00

https://www.countryipblocks.net/country_selection.php

How to delete number of files from txt using the script

2017-01-02T03:22:00.002-08:00

for i in `cat dzq.txt` ; do rm -rf $i ; echo removing $i; done

File name : cat dzq.txt

Common Blacklist Removal Tools & Forms

2016-12-12T15:43:00.002-08:00

https://www.ndchost.com/wiki/mail/blacklist-removal-tools-forms

Mysql Optimization Parameters (cPanel)

2016-11-07T04:20:00.002-08:00

[mysqld]
key-buffer-size=512M
local-infile=0
symbolic-links=0
max-allowed-packet = 128M
wait-timeout=20
connect-timeout=10
max-connections = 500
max-user-connections=150
tmp-table-size = 64M
max-heap-table-size=64M
query_cache_limit=2M
query-cache-size=64M
query-cache-type=1
thread-cache-size=50
open-files-limit=4096
table-definition-cache=4096
table-open-cache=4096
sort-buffer-size=256K
read-buffer-size=2M
read-rnd-buffer-size=8M
myisam-sort-buffer-size=64M
innodb-flush-method=O_DIRECT
innodb-log-files-in-group=2
innodb-flush-log-at-trx-commit=1
innodb-file-per-table=1
innodb-buffer-pool-size=10G

max_allowed_packet=268435456
open_files_limit=10000
[mysqld_safe]
open-files-limit=8192

[mysqldump]
quick
max-allowed-packet=16M

[myisamchk]
key-buffer=384M
sort-buffer=384M

Php 7.0 is not enabled in cloud linux php-selector

2016-10-07T09:21:00.002-07:00

If php 7.0 is not enabled in cloud linux php-selector

Step : 1
========
Goto : cd /etc/cl.selector/selector.conf
check the entries for 7.0

Step : 2
========
run the command
/opt/alt/php70/usr/bin/php -v
Modify the /etc/cl.selector/selector.conf as per the output in the command /opt/alt/php70/usr/bin/php -v to add php7.0

Sample PHP 7.0 Entry :
====================
php 7.0 7.0.11 /opt/alt/php70/usr/bin/php-cgi
php-cli 7.0 7.0.11 /opt/alt/php70/usr/bin/php
lsphp 7.0 7.0.11 /opt/alt/php70/usr/bin/lsphp
php.ini 7.0 7.0.11 /opt/alt/php70/etc/php.ini

PHP compiled over Main PHP version in cPanel Fix

2016-09-15T09:49:00.005-07:00

if you wish to always execute a specific version of PHP from the command line interface when running 'php' you can move the existing /usr/local/bin/php to an alternate location and symlink the desired version
====
# mv -v /usr/local/bin/php{,.53}
# ln -s /opt/cpanel/ea-php55/root/usr/bin/php /usr/local/bin/php