Online Statistic ERROR

[MakassarNET]

Need help!

I have a problem with my directory www.situs-indonesia.com.

In the directory, ln the left side area, there was an Online Statistic to count how many visitors are online at the moment in total and how many guest and members are online.

Since this morning, I found out that the script is not working at all. It just show that 1 visitor are online. But in fact, those website has 500-800 unique visitor each day. The most thing I can see, ussualy if I login, the system will recognise let say 20 members are online; 1 members and 19 guests. But this time, even I login at admin area, they still count as 1 visitor online. In the admin panel it self, it also just showing 1 visitors are online without any IP information.

Can anyone help what is the problem of my directory? I already try to restore from yesterday backup and last week backup, but still the problem exist.

[Bruceper]

I have no checked, but is your site still setting cookies when you get visitors? That's how it tracks the users across the site.

It's possible you may have broken something during editing.

[MakassarNET]

Bruce,

Well, it was starts when I found out some shells uploaded on my server by nobody users in my Situs-Indonesia.com account. Than I change all folder permission to 711 to avoid accessing the folder anymore.

Than after I do that, the online statistic is not working. I have try to change the chmod back to 757 or 777 the onlinee statistic is still not working.

[MakassarNET]

Bruce,

Can you tell me if all folders permission can be setup as 711? Or some need to be as 755 or 777?

[Bruceper]

settings folders to 711 will cause issues with lots of things, IndexU is one of them.

And by the way, setting permissions does not fix the security issue, it simply masks it. You should hire someone to take care of the issue permanently.

The following folders need 777 permissions
backup
cache
templates_c
themes
upload_files

[MakassarNET]

So, please tell me how can I avoid such a thing?

[Bruceper]

That's a whole different topic and it could go on for days. Hire a tech to secure your server, if you have a cpanel server then I suggest platinumservermanagement.com which is one company that I use.

[MakassarNET]

Bruce,

Thanks a lot for the information...