kaseytraeger

I transferred two domains and experienced no DNS propogation delay or lapse in service...

This is why Bill and TCH are so successful. I can only add my two cents and say that I love it here. Hands down, bar none, TCH provides the best service I've received in *ANY* industry in many years.

And the final image (the login screen)

Here's image #2

Bruce, Before I saw your post, I had tested the ability to access cPanel through secure connection by typing https://www.****/cpanel'>https://www.****/cpanel. I received a couple of notification windows telling me about the certificate for the server. I'm attaching them below. You'll notice that one of them says the certificate belongs not to my domain, but to server26.totalchoicehosting.com. Does this make it the same as typing https://server26.totalchoicehosting.com/cpanel into my browser address bar? I then receive another notification window about a certificate belonging to #######.servernode.net (or something along those lines). If I keep clicking on through, I get the login prompt as shown in the third image. Is this normal behavior? I guess my understanding was that we wouldn't even see security certificates if we tried to access cpanel via https://www.****/cpanel But since I'm receiving notification that the certificate is there (but doesn't match the certificate owner), I'm confused as to whether or not it's really working...

Hi all, I've been avidly reading (and posting) to the topic about preventing unauthorized access to your computer and your web space. That brings up another question I'd like to ask. I use FileZilla to upload files to my web site. Does anyone know if there is a way to make sure that I can securely log in to my TCH account and upload files? I've recently learned that you can securely access your cPanel using the URL https://www.yoursite.com/cpanel. What about FTP clients? Is there a way to tell them to access your web site using a secure login?

It's a good thing (depends on your point of view) that this happened. I think it will bring it to more people's attention that they can't and shouldn't be lax on web site security or computer security in general. Although Bill had to take a hard stand against crossma, I do agree that we are responsible for our own actions, and that his action was perfectly in line with the TOS. If it were my company, I'd do the same thing. You simply cannot risk the health of your business by allowing hackers to come in and commit their dirty deeds on your servers and computers. I think TCH's TOS are quite reasonable and certainly acceptable (otherwise I wouldn't have agreed to be bound by them). From what I can tell having read the TOS for various other things such as downloading free images or software, there is nothing uncommon about the statement that we are responsible for damage committed by our computer. We just need to be aware that unauthorized access (if that's what it was) can and does happen and that we as consumers need to take precautions against it.

Oops, I see a mistake in my understanding already. You want the system name to stay constant after being entered by the first person. Subsequent people are only allowed to enter name and date, right?

This is definitely a task for PHP and MySQL database. The overall process will happen like this. (1) web page has three text fields (2) user enters data into each of the three fields and clicks "submit" (3) data from each of the three fields is transferred to a MySQL database when the "submit" button is clicked. (4) the page refreshes with an embedded PHP script calling the MySQL database for the data stored in each record of the database (5) the PHP script generates a table using the data in the database (6) the refreshed page now displays the table of MySQL data (even those from people who have entered data prior to my data enry) and resets the data entry fields to be empty Sound about right? I can provide sample code for this for you, but you'll have to create the MySQL database and make changes to the code to properly reflect the database-specific information such as db name, table name, an authorized user name and password, etc. As for sports teams ... can't say that I have a favorite. I don't follow too many sports these days. I think I got burned out on it (yes, for all you sports fans out there, some people do get burned out ) when I was a child. My parents hauled me around to so many sporting events that they stopped being fun around the time I turned 12 or 13. I still enjoy a good baseball game, though. These days, I'm more likely to watch my own local teams than those from other parts of the country. However, in my baseball hey-day, I was an avid fan of the Braves.

I must apologize because I certainly was not trying to imply that HG would do anything of the sort. My question was more along the lines of being a newbie when it comes securing my website and preventing unauthorized users from gaining access to my account and wrecking havoc. In many respects, I'm quite gullible. But I also worry that I'll do something unintentionally that can get me into trouble. (Probably some childhood psychological issues to be worked out with a therapist! I'll blame my mom for that one ... yeah, that sounds good ... mom did it to me!) I am also not aware of the various tools you folks have at your disposal to determine whether it's me doing the bad deeds or someone else who's pirated my account. I'm glad to know that there are processes and policies in place to handle this sort of thing. By the way, Madmanmcp posted a comment about BO ... what is that? The most I know about it is that you can really turn people off if you get too close to them when you've got it real bad!!! You see, what did I tell you? I'm definitely a newbie!!

Did you create the banner graphic on the second page (after the splashscreen)? The dragon is great! The only game I play is "The Sims", so while I can't appreciate the innerworkings and technicalities of D&D, I definitely like your banner. It's a very nice site. I also agree with brich that your forum skin is outstanding. I love the "scaly," "bumpy" look -- it's like reptile skin!

Thanks, Bruce, I'm going to set a browser link/bookmark then to create secure access to my cpanel!

Thank you, HG, for clarifying this issue. Like arvind2100, I was concerned about someone gaining access to my account and having my account suspended and legal/authoritative action being taken against me. But of the things on your list, I do most of them, except that TCH-Lisa just two days ago helped me install MovableType, so I guess I just installed a third party script. However, MT is a fairly well-known and trusted script, so I'm hoping that it's reliability and trustworthiness makes my site safer than if I had installed "Joe's Blogging Software." I do have a few questions some of your suggestions. I'll reprint them here for easy reference: For item #3, "only use https to connect to your cpanel/whm", I'm not sure how to do this. When I access my site, I'm just using www.mysite.com/cpanel. I don't think this is https. Do I need to access my cpanel with the following command? https://www.mysite.com/cpanel For item #5: cPanel has a feature that blocks direct access to any file or folder that has been locked. Is this as effective as using .htaccess to stop directory browsing? If not, does anyone know of a good tutorial that outlines how to use .htaccess to stop directory browsing? Thanks, everyone. Thumbs Up Happy Friday!

Hi Ramsey, I haven't coded too much in JavaScript, but I have in other languages, so bear in mind that what I'm saying isn't language-specific. I'm not sure if the problem lies in your pop-up script. It seems to me like the problem is happening with the content of the pop-up window. When the pop-up window appears, it says "Check out the new community" -- which I presume is a link to the community page that you want to load into the non-navigational frame. To do this, make sure that the frame has a unique name/id, and that the window it sits in (that contains both the navigation frame and the content frame) has a name. Then you set your link in the pop-up window to go to the window with the specific name you've chosen (e.g., "main window") and appear in the frame that's supposed to contain content (e.g., "contentframe" versus "navigationframe"). Let me do a bit more research, but I think that will work for you.

Just want to toot the big TCH horn here and say that TCH-Lisa walked me through the installation of MT. We got it right the first time! Got my first official post added, and my first official comment (thanks, Lisa!). What can I say except, *bowing as deeply as possible* "THANK YOU!!!!!!" to Lisa for all her wonderful help. People, this is the reason we are here at TCH. Everyone works to help everyone else out. No other place around like this that I know of. Rock Sign and TCH-Lisa ROCKS!

MikeJ, Thank you very much for this tidbit of wisdom. This is good information to know. I definitely want to keep the installation as flexible as possible -- I'm hoping that by doing so I'll prevent a lot of problems down the road.

Lisa, I just sent you a PM. I'll check my PM messages when I get home this evening to see if you've replied.

Hi all, This is the first of what I feel may be many posts by me asking for your help to install Movable Type to my web space. I'd like any advice/comments you can provide if you're familiar with MT or have experience (even 1 time) of installing MT for yourself. First question -- is it better to install MT to a subdomain or to a directory? I'd like to use the subdomain approach because that seems the most logical way of modularizing and compartmentalizing my site, but I'll wait to hear back before setting up a subdomain and "going for it". Second question -- The TCH help site offers info about how to install MT to your site. One of the steps discusses the installation of MT "standard" and MT "lite". What are the pros and cons of installing the "lite" version instead of the "standard" version, and vice versa? I know the standard version has the complete set of libraries and that the TCH help site says we should install the HTML::Templates library if we go with the lite version. For those of you who have the full version of MT installed, do you find it helpful to have all of the additional libraries available, or do you rarely use them? OK, so that's it for now. As I said earlier, you can be sure to hear from me again since this is the first Perl scrip I've ever installed! Thanks everyone.

You want the content of TEST SYSTEM 2 to be taken directly from what the user types into TEST SYSTEM 1? If that's the case, yes, it can be done. I'll work on it for you, but I need to make sure that I have a full understanding of where the "automatically copied" information will be coming from.

Yeah, yeah, yeah ... we know you've all got the ultimate patch called "Alternate OS". Must be nice! (hee hee)

It's interesting that this topic came up because I was just in a Microsoft Clinic class today -- course #2801A "Microsoft Security Guidance Training I". Call that serendipity or a cowinkidink!

Aknot, Did you ever get this issue resolved?

I've just had a couple of domains parked on top of my original domain. From what I'm able to see from a user's point of view, parking a domain allows you to still access internal files and folders. For example, I now have my domains parked one on top of the other. Let's say I was trying to access a file called hello.htm located on domain1.com. Typically, I would type www.domain1.com/hello.htm By parking another domain on top of domain1.com, I can access that file like this. www.domain2.com/hello.htm If I only used the forwarding option provided by my registrar, I noticed that I was not able to directly access the hello.htm file. Instead, I would receive a 404 Page Not Found error. I don't know if this is the true difference between parking and forwarding, but it's one difference I noted. This was important to me because I have a small website that I want family and friends to be able to access, but I want to let my original domain name, domain1.com, expire at the end of it's term. This way, I can gradually move the domain content to my new domain name, domain2.com, and have plenty of time to notify friends and family. Either way, until the expiration actually takes place, the transfer looks completely transparent to them.

Hi Bruce, Here is another set of questions for you. I'm looking at the backup panel right now. I had three options: (1) full backup, (2) home directory, and (3) MySQL DB backup. I chose #1 -- Generate/Download a Full Backup. On the next screen, I'm presented with a series of form fields. #1 - Backup Destination with options of -- Home Directory -- Remote FTP Server -- Remote FTP Server (passive mode backup) #2 - Email Address #3 - Remote Server (FTP/SCP only) #4 - Remote User (FTP/SCP only) #5 - Remote Password (FTP/SCP only) I presume that I should choose the backup destination as "Home Directory" and leave items #3, #4 and #5 blank since I don't know anything about Remote FTP Servers. Is that the option I should choose? Is this the command to have the backup file placed in my root folder? I remember trying to do a backup once before, but I screwed it up. That's why I'm asking all these questions. I'm just being extra cautious. I'm in a class this afternoon, so I'll be checking in during our class breaks. Thumbs Up Thanks, Bruce!

Yes, you can send mail using PHP. My web site is hosted with TCH and uses a PHP script to send email. Can you copy your error message and post it here for us to review?