Category: Blog

When you want to make several images listed side-by-side horizontally and re-size those images according to devices accessing.

We develope PHP, html and CSS to customize wordpress based home page.

For CSS, “

.d1 {
display:flex;
width:100%;
}

.d1 img {
width: 33%;
align-self: flex-start;
display:flex;
text-align:center;
}

“

“d1” is class name at html.

At html, “

<p class=”d1″>
<img src=”image1.jpg”>
<img src=” image2.jpg ” >
<img src=” image3.jpg “>
</p>“

“align-self: flex-start;” in CSS will set these images nicely listed at safari browser of iphone. Otherewise, ratio of images was not controlled right.

Recently, we are battling with various types of attacks to our website. We will report and leave a log to those who might have similar experiences in the future or at present.

First, a symptom of the attack was overwhelming access flowing to our website. The keywords were various and no related to our business and page of access was unknown to us.

The page was created by someone unknown somehow by surprise. Then, the page was deleted instantly; however, a huge number of keywords kept on coming up at browsing results as well as tons of access to our website page. It looked like a number of keywords was increasing and website performance was slower.

It was a attack called DoS Attack. We needed to have protections to stop them somehow. In the beginning, we did followings:

• Stay calm and respond quickly
• Review conditions and Estimate the damages in the system
• Confirm our skills and power to fight back

It was urgent because of the potential damages, so here what we did:

• Delete unknown page, files and codes created for harmful purpose
• Check server to find out any unknown files and codes
• Check access log file in the system to see who has accessed to our system
• Create .htaccess file and write them to stop unwelcomed access to our page
• Create .ftpaccess file and write them to stop unwelcomed access to our system
• Create robots.txt file to request Search Engine to reduce access to page.

There were many threats and unwelcome accesses and files added and modified by unknown. You should browse about htaccess file and ftaccess file if you are interested and think you are capable of editing it. It is very helpful for defense system created by your own. Or, it is helpful in SEO purpose. Anyway, that is not our main focus here. All the defensive files worked well to stop overflowed unwelcomed access.

However, There was one remaining problem that was not resolved. After searching for bad files and codes in the system, a bad one was found and deleted but kept on created repeatedly somehow. A day after being deleted, it was there again. It was a directory (folder) contains a cashe folder, index.php file.

We tried to change password and shutdown access from outside. But it was not resolved. So, It was assumed there were codes or files remaining inside system with a trigger to recover it when folder not exit.

After investigation of the system, we found a line of code in index.php at home directory. Here is a site describing the attack: https://stackoverflow.com/questions/43211850/my-site-is-infected-with-obfuscated-php-malware-what-is-it-doing-how-do-i-ge

Hope you don’t get an attack that we received. But you may want to check your system and wordpress files.

Helpful websites and tips to protect your site:

• Scan to check security risk of your wordpress site: https://wpsec.com/
• Sure to update your wordpress as latest one
• Select theme wisely. Maybe we should create one by our own
• Select plugins and get updated. Delete no need plugins.
• Change passwords and logout system from everywhere
• Google robots.txt Tester

We have not been able to progress the new code learning project of 100 days with SwiftUI. We are on Day 43 Project 9. We will need to catch up on the project.

Today, what needs to be done is to report and comment the updates on existing on-going project on CRM System with wordpress. We are considering to implement a web app with wordpress as server side system. It might not be a good idea to publicize the system planning on-line because of security purpose.

But, if anyone with similar background is interested in developing their own web app with iPhone app, it might give you an inspiration or some kind of tip on planning your own system.

It is always challenging something new to us. Many time, we have to admit the lack of our knowledge and skills. Especially, it gets harder when few help or resource is available around us. So, it is important to keep our mind fresh and positive although it is easier to be said than actually done.

Ultimately, we have to surrender our ability or power, and depend on the power of God, the Almighty. When we give up on trying all by ourselves but ask Him for the answer and direction, it is never wrong or misguided because He knows everything we need. We hope you find the right one you can trust your entire life the most. It is kind of off topic from what we first tried to make this post.

Back to the topic on CRM system, our system is so far functioning with all the needs now by replacing web based system to excel. Current system is more effective in many areas: Security, Searching, Sorting, Updating etc.
CRUD is the technical term. This is an interesting example of CRUD provided by CodeCademy. But our system is more simple to use PHP to move mySQL DB system.

We will need to work on JSON to encrypt and transfer data between server and clients.

In the next post, we hope we can report you all about the progress on our projects.