.htaccess comments

[kornmonkie]

I have two sites hosted on Dragon. Two different accounts.

I had the exact same thing happen as the guy in this post: .htaccess modified

Both sites were broken until I figured it out.

The line commented out was:
AddHandler application/x-httpd-php .php .htm .html

I'm not sure if it was commented out by staff or something else. I uncommented them.

Oh and the raw logs were checked.

[steve-hopeworks]

Thanks for posting this! I have had the EXACT SAME THING happen to several of our clients. I submitted a ticket to Jaguar and they denied modifying this setting. I also doubt this was a hacker attack, it is a rather unexciting hack to make.

Anyway, anyone else affected by this? Any word on why this happened? Thanks

[Ron]

Oh no! That would be a wonderful hack, wouldn't it cause Apache display all of your site's sourcecode, including anything utilized outside of the webspace?

Then again, if you're already into the machine well enough to modify .htaccess...

[kornmonkie]

There was some source code exposed on one of the sites and none on the other. Luckily all that was displayed was some of my hit counter code.

[steve-hopeworks]

The only way they would be able to comment the htaccess would be through FTP or SSH -- at that point, they could download the entire site and/or wreak havoc in many more destructive ways.

I am curious if this is jaguar throttling sites for performance reasons. Processing all html files as php probably requires more processing power. They have denied doing so thus far, but I'm not sure what else might be the culprit, especially considering this problem has affected jaguar customers on totally different servers.

[JPC-Masood]

I'm not sure what else might be the culprit

cPanel

[steve-hopeworks]

Thanks for replying, Masood -- what in cpanel would do this?

[JPC-Masood]

Their php related scripts in easyapache 3.

[Gwaihir]

I am curious if this is jaguar throttling sites for performance reasons. Processing all html files as php probably requires more processing power.

But no one makes this setting unless he really does need it. So, messing with that wouldn't be throttling, but simply pissing off clients. (Which is something the cPanel upgrade scripts are much better at than JagPC staff .)