Blogs

Comodo Partner & Distributor in Pakistan

YISolutions,  is proud to announce its appointment as the exclusive distributor & Partner of the complete range of Comodo products & Services in Pakistan.   About  Comodo Comodo Security Solutions, Inc. is a cybersecurity company headquartered in Clifton, New Jersey in the United States. Core Services / Products; Website Security End Point Security Anti-Virus Email Security Threat Intelligence About  YISolutions YISolutions is a key player in IT Consultancy, Cyber Security and IT Managed Services. YISolutions was established in 2002-2003 and our Pakistan Registered Office is located in Karachi at Clifton. And our Principle Registered office is located in the US at Herndon.   Core Services; IT Managed Services Cyber Security & Protection Cloud Solution Digital & Social Media Marketing Software Solution Web Solution For more information please email us at  support@yi.com.pk   You can also visit Comodo e-Store in Pakistan 
Read more

LifeSize Partner & Distributor in Pakistan

YISolutions,  is proud to announce its appointment as the exclusive distributor & Partner of the complete range of Life Size products & Services in Pakistan.   About  Life Size Because video communication is more than just a meeting tool. Good enough isn’t good enough. Not for your business, not for your first impression and not for your mission-critical relationships. We’ve engineered the absolute best video conferencing experience possible — the definitive solution for both high-powered meetings and everyday communications. Rated best-in-class for video, audio and content-sharing clarity, we help you present your business in the best light and make the best impression with every conversation. Core Service / Product; LifeSize – Video Conferencing About  YISolutions YISolutions is a key player in IT Consultancy, Cyber Security and IT Managed Services. YISolutions was established in 2002-2003 and our Pakistan Registered Office is located in Karachi at Clifton. And our Principle Registered office is located in the US at Herndon.   Core Services; IT Managed Services Cyber Security & Protection Cloud Solution Digital & Social Media Marketing Software Solution Web Solution For more information please email us at  support@yi.com.pk   You can also visit Life Size e-Store in Pakistan 
Read more

Amazon Web Services outage takes a portion of the internet down with it

Amazon Web Services  is currently having an outage, taking a chunk of the internet down with it. Several AWS services were experiencing problems as of early Wednesday, according to its status page. That means any app, site or service that relies on AWS might also be down, too. (As I found out the hard way this morning when my Roomba refused to connect.) Amazon  says the issue is largely localized to North America. The company didn’t give a reason for the outage, only that it was experiencing increased error rates and that it was working on a resolution. The irony is that the outage is also affecting the company’s “ability to post updates to the Service Health Dashboard,” so not even Amazon is immune from its own downtime. So far a number of companies that rely on AWS have tweeted out that they’re experiencing issues as a result, including Adobe and Roku.      
Read more

cPanel vs DirectAdmin

cPanel vs DirectAdmin Features cPanel DirectAdmin  PHP Version Selector Yes Yes  LetsEncrypt Free Yes Yes  Reseller Hosting Yes Yes  Shared Hosting Yes Yes  FTP Yes Yes  File Manager Yes Yes  WebMail (Roundcube) Yes Yes  Database Yes Yes  PHPMyAdmin Yes Yes  Softaculous Yes Yes  CloudLinux Yes Yes  Site Backup Yes Yes  Overselling (Reseller) Yes Yes  2Factor Authentication (Shared & Reseller) Yes Yes  Whitelabel (Shared & Reseller) Yes Yes  AutoSSL (Shared & Reseller) Yes Yes  Reseller accounts Yes Yes  SSH Access (limited ssh access per account) Yes Yes  PHP Modules Yes Yes Reseller Accounts Features cPanel DirectAdmin  Overselling Yes Yes  Package Creation Yes Yes  Softaculous Yes Yes  Jetbackup Yes Coming Soon  AutoSSL Yes Yes  PHP version selector Yes Yes  SSH Access Yes Yes  CloudLinux LVE (resource limitations) Yes Yes  PHP Modules Selector Yes Yes  EMail Accounts Yes Yes  SpamAssassin Yes Yes  User welcome message(Reseller) No Yes  Notification to all user(Reseller) No Yes  IP management Yes Yes  Manage backup Yes Yes  Skin manager No Yes  Customize Evolution Skin No Yes  File manager Yes Yes Shared Hosting Accounts Features cPanel DirectAdmin  Softaculous Yes Yes  Jetbackup Yes Coming Soon  AutoSSL Yes Yes  PHP version selector Yes Yes  SSH Access Yes Yes  CloudLinux LVE (resource limitations) Yes Yes  PHP Modules Selector Yes Yes  EMail Accounts Yes Yes  SpamAssassin Yes Yes  FTP management yes Yes  Vacation message No Yes  Auto Responder Yes Yes  PHPMyAdmin Yes Yes WebMail (Roundcube) Yes Yes Password protect directories Yes Yes Admin Side Features cPanel DirectAdmin Move Users Between Resellers No Yes
Read more

WordPress Ultimate Member Plugin Vulnerability

Ultimate Member WordPress plugin issued a patch for three critical and severe exploits that grant attackers total control of a site. Today it was announced that “critical and severe vulnerabilities” affect a WordPress community building plugin called, Ultimate Member was patched. This vulnerability is easy to exploit and gives the attacker administrator level access, meaning they can do whatever they want to the site. This is how Wordfence describes the seriousness of this exploit: “This vulnerability is considered very critical as it makes it possible for originally unauthenticated users to easily escalate their privileges to those of an administrator. Once an attacker has administrative access to a WordPress site, they have effectively taken over the entire site and can perform any action, from taking the site offline to further infecting the site with malware.” Ultimate Member WordPress Plugin The Ultimate Member WordPress plugin is a form of community building plugin that allows a WordPress publisher to allow readers to become members who can receive various levels of access as well as interact with each other socially. It’s a solution that can also be used to restrict access to the content to registered users only and to grant various levels of membership privileges, like publishing to the site. Ultimate Member Vulnerability There are three exploitable vectors in the plugin and all three are privilege escalation exploits. A privilege escalation exploit is when an attacker can increase their user privilege. For example, if someone is registered with a site as a subscriber they can do things like read articles and comment on them. But with a an exploit they can elevate their site privileges from subscriber to an administrator level and thus grant themselves the ability to do whatever they want with the site. An authenticated privilege escalation exploit is when someone needs to have some kind of authentication, like a subscriber role. With an Unauthenticated Privilege Escalation exploit, a person doesn’t even have to be a registered user. The exploit affect the Ultimate Member plugin involved two unauthenticated exploits and one authenticated exploit. The Authenticated Privilege Escalation exploit allows a registered user to upgrade their privileges. The Unauthenticated Privilege Escalation exploit allows an attacker to use the registration form as an attack vector. These exploits are serious, rated critical and severe. Here’s how WordFence describes it: “…this vulnerability is considered critical as it allows originally unauthenticated users to escalate their privileges with some conditions. Once an attacker has elevated access to a WordPress site, they can potentially take over the entire and further infect the site with malware.” Update Immediately Don’t let Click Fraud take advantage of youStart a free trial with Clickcease and experience GoogleAds marketing in a fraud-free environment.
Read more

YouTube went down around the world, but it’s now fixed

YouTube has recovered from a seemingly worldwide outage that prevented videos from loading for roughly an hour. During the outage, many Verge staffers were unable to watch videos, and YouTube confirmed at 7:23PM ET that something was going on: The issue appeared to affect other services that use the YouTube infrastructure too, including YouTube TV and the movies and TV shows you’d purchase through Google TV (formerly known as Google Play Movies & TV). We couldn’t load them. Early in the outage, the YouTube website itself seemed to load just fine, but videos themselves would continuously show the loading wheel. One Verge staffer got a video to load after about a minute. As of about 8:00PM ET, though, we saw error screens like this whenever we tried to watch a video: At 9:13 PM ET, YouTube gave the all-clear: Things seemed to be back as early as 8:30PM ET, but you might have hit a few quirks. At that point, videos played on YouTube’s website seemed to be working as they normally do. On the mobile app, one Verge staffer saw a few error messages, but those would clear with a refresh. YouTube TV worked on mobile for another Verge staffer at that point after he force closed the app. DownDetector showed a truly tremendous number of user reports of problems with YouTube, indicating the problem was widespread — the DownDetector graph peaked with more than 280,000 user reports in less than an hour. Numerous users on Twitter reported that YouTube wasn’t working for them, either, and searches spiked for “is YouTube down.” When reached for comment, YouTube pointed us to the tweet we included in this story. Update November 11th, 8:51PM ET: YouTube seems to be recovering, so we have made numerous changes throughout. Update, 9:16PM ET: Added YouTube’s all-clear.
Read more

How to Protect a WordPress Site from Hackers

Tips on how to protect a WordPress site from getting hacked, including recommended security plugins. WordPress is a frequent target for hacking. Hackers are targeting the theme, the core WordPress files, plugins and even the login page. These are the steps to take to make it less likely to be hacked and to be able to recover easier if it should still happen. How Hackers Attack WordPress All sites on the web are under constant attack, whether it’s a phpBB forum or a WordPress site, all sites are being probed by hackers. It’s not unusual for a hacker to scan thousands of pages or try to login in hundreds of times a day. And that’s just one hacker. Sites are under attack by several hackers at the same time. Typically it’s not a person who is trying to hack you. Hackers employ automated software to crawl the web to probe for specific weaknesses in website. These automated software programs crawling the web are called bots. I call them hacker bots in order to distinguish them from scraper bots (software that is trying to copy content). Protect Your WordPress Site with a Firewall A firewall is a software program that blocks an intruder. In my opinion, the best WordPress firewall is a plugin called Wordfence. What Wordfence does is to check if a website visitor’s behavior matches that of an abusive bot. If the bot breaks certain rules, like asking for too many web pages in a short amount of time, Wordfence will then automatically block the bot. Wordfence is also programmed to allow legitimate bots like Google and Bing on the site. There are advanced features that let a publisher see what bots are attacking a site and to view where the bot is coming from, like if it’s bad bot coming from Amazon Web Services or Bluehost for example and then give you the ability to block the bot by their IP address, the entire IP address range or even by the fake user agent that the bot is using. Some bots pretend to be a person on Windows XP. So you can actually block all visitors with a user agent that displays Windows XP and stop those bots automatically. With one rule that a publisher creates with Wordfence, they can block thousands of hackers. Wordfence is a powerful tool on its own but some of the advanced features allows you to block even more hackers. And that’s with the free version of Wordfence. The paid version can block entire countries. So if you don’t have legitimate site visitors from certain countries, you can block every visitor that’s coming from those countries. Additionally, the paid version of Wordfence will protect you in advance from many compromised themes and plugins before those plugins are fixed. Once Wordfence researchers are aware of an exploit they will update their paid users to give them protection from those exploits, usually well before the exploit is patched by the compromised theme or plugin developer. Website Security Hardening Another free plugin that provides an additional layer of protection is called, Sucuri Security. Sucuri (owned by GoDaddy) helps harden the WordPress security to block bad bots from taking advantage of certain kinds of attacks. It also has a malware scanning feature that checks all files to see if they’ve been altered. Sucuri will alert you every time someone logs into your site, helping publishers to identify if a hacker is logging in. Sucuri can also alert a publisher if a file was changed, something that hackers do. These are the features of the free version of Sucuri: “Security Activity Auditing File Integrity Monitoring Remote Malware Scanning Blacklist Monitoring Effective Security Hardening Post-Hack Security Actions Security Notifications” The paid version of Sucuri includes a website firewall. Limit Logins to Your Site WordFence is able to block bots that are repeatedly filling in user names and passwords in the WordPress login page. But if you want to focus on limiting those logins, there is a plugin called, Limit Login Attempts Reloaded that allows publishers to automatically block all hackers who enter a set number of failed name and password combinations. For example, you can set it to block hackers after three attempts to guess the password. These are the features of the login blocker: “Limit the number of retry attempts when logging in (per each IP). This is fully customizable. Informs the user about the remaining retries or lockout time on the login page. Optional logging and optional email notification. It is possible to whitelist/blacklist IPs and Usernames. Sucuri Website Firewall compatibility. XMLRPC gateway protection. Woocommerce login page protection. Multi-site compatibility with extra MU settings. GDPR compliant. With this feature turned on, all logged IPs get obfuscated (md5-hashed). Custom IP origins support (Cloudflare, Sucuri, etc.)” The Limit Login Reloaded plugin provides a fast way to shut down hack bots that are trying to guess a password. Backup Your WordPress Site It is important to automatically create a daily backup of your website. Any catastrophic event that takes the site down can be recovered from with a backup. There are many backup solutions but the one that I have found to be immensely useful is called UpdraftPlus WordPress Backup Plugin. UpdraftPlus is trusted by over two million users, it’s a well regarded choice. It can be configured to email the backups every day or send them to a cloud storage location like Dropbox. I once accidentally removed all the theme layout files from a site, completely removed the look of the site. But I was able to restore the site to exactly how it was before by using an UpdraftPlus backup. It was easy to do and I was so thankful. Update all Themes and Plugins It’s important to always update all themes and plugins. WordPress provides a way to update all plugins automatically, which is convenient for publishers or businesses who don’t log in and do updates often. By enabling the autoupdate feature a publisher can be
Read more

Install WordPress Theme Using FTP Client Filezilla

Install WordPress Theme Using FTP Client Filezilla We can modify our WordPress site’s appearance and layout using WordPress themes. WordPress theme is a collection of templates and stylesheets used to define the appearance and display of a WordPress powered website. WordPress theme changes the look of our WordPress sites in an elegant way without changing the core functionalities of the site. Most WordPress Themes provide: The overall design and style of our site. Font styling. Colors. Widget locations. Page layouts. Styles for blog posts and blog archives. Additional stylistic details. There are several free and paid WordPress Themes available. You can download themes from the WordPress Theme Directory, those themes are checked and inspected, and are free for downloading or you can download the themes from third-party websites which offer free or paid WordPress themes. You can also download themes which are not available on WordPress Theme Directory from the third-party websites which offer free or paid themes and you can install the downloaded theme using Filezilla, an FTP client. The steps to installing a WordPress theme using Filezilla are listed below: Before installing a theme which is downloaded from a third-party site, consider the following: Evaluate whether you really trust the theme provider. Check out the reviews of the theme and the specific theme provider. Make sure the file is truly a .ZIP file once it’s downloaded. The prerequisites for this method are a .ZIP WordPress theme file, FTP hostname, username, password, and Filezilla. 1) Unzip the downloaded .ZIP theme in your local system. 2) Open Filezilla and enter the host, username, and password then click “Quickconnect”. 3) Select the target directory, “wp-content/themes,” on your web server in the right pane. 4) In the local site (left pane), locate the folder where you saved the theme. In this tutorial, we will use the hitchcock theme saved in the desktop. Then right-click on the “hitchcock” folder in the local site and click “Upload” 5) Now you have just uploaded the new theme in WordPress. Login to WordPress dashboard to make the theme in use. Then Go to Appearance > Themes. 6) You can see the uploaded theme was listed in your WordPress dashboard. 7) To activate the new theme, move the mouse pointer to the Hitchcock theme. The Activate and Live Preview button will appear. Click “Activate”. 8) Go to your WordPress site and see the newly activated theme.   If you need any further assistance please contact our support department.
Read more

Unable to Access PhpMyAdmin in cPanel

In this tutorial, let’s check how to access PhpMyAdmin in cPanel. PhpMyAdmin is a free web application that provides GUI for working with the MySQL database management system. It is used to perform administration tasks like creating a database, running queries, and adding user accounts. It is compactable for almost any operating system. This tool is written in PHP that is intended to handle the administration of a MySQL or MariaDB database servers. Various options for managing the databases using phpMyAdmin 1) Structure:  It is the basic design of the database. Helps to organize your schemas, tables, and columns. 2) SQL: Structured query language used to manage data in the database management system. It helps the administrator to runs SQL query/queries on MySQL or MariaDB servers. 3) Search: Searches words or values inside the database tables. 4) Query:  Query is a request for data or information from a database table or combination of tables.  SQL defines a set of commands, such as SELECT, INSERT, UPDATE, DELETE, CREATE TABLE and many more. 5) Export: Exports database in different formats such as CSV, PDF, SQL, XML, Text, etc. 6) Import: Imports database in different formats such as OpenDocument Spreadsheet, CSV, SQL, ESRI Shapefile, XML. 7) Operations: There are various operations which you can execute on the whole database and on a separate table.   Sometimes we are unable to use phpMyAdmin in cPanel. The most common error every user gets with MariaDB is: mariadb.service stop-final-sigterm timed out. Skipping SIGKILL. Entering failed mode In order to investigate the issue in detail, we have to log in to the server (logged as root using SSH) and execute the command given below. cat /var/lib/mysql/server.hostname.err After executing the command, you will see the error message on the console just like this. Mar 27 20:17:36 t4w6.xentio.lan mysqld[6303]: 2019-03-27 20:17:36 0 [Note] /usr/sbin/mysqld (mysqld 10.3.5-MariaDB) starting as process 6303 … Mar 27 20:17:37 t4w6.xentio.lan systemd[1]: mariadb.service: main process exited, code=exited, status=1/FAILURE Mar 27 20:20:37 t4w6.xentio.lan systemd[1]: mariadb.service stop-final-sigterm timed out. Skipping SIGKILL. Entering failed mode. Mar 27 20:20:37 t4w6.xentio.lan systemd[1]: Failed to start MariaDB 10.3.5 database server. Mar 27 20:20:37 t4w6.xentio.lan systemd[1]: Unit mariadb.service entered failed state. Mar 27 20:20:37 t4w6.xentio.lan systemd[1]: mariadb.service failed.   Please follow the below steps to resolve this issue. 1) Login to the server as root user via SSH. 2) Start the MySQL using the following command. service mysql start 3) Navigate to the following location. cd /var/lib/mysql 4) Here you can see a file named tc.log. It is a text file, along with a list of binary logs. It was created with a fresh installation of MariaDB. Rename the file to some other name like tc.log-bk mv  tc.log tc.log-bk 5) Then start MySQL again. service mysql start   Now, you would be able to access PHPMyAdmin from cPanel. If you are still facing this issue, please contact our support staff let our experts solve the issue on behalf of you.
Read more

Login to WordPress Dashboard From cPanel

You can easily log in to WordPress dashboard from the cPanel without the password. Nowadays we all are installing the applications on cPanel using Softaculous. Softaculous is the installer which has lots of scripts available. It has a list of all the available scripts on its control panel that you can access from the cPanel. Once you are on the Softaculous panel, you can choose the application you wish to install. After the application is installed, you can list the installed application details under the chosen session. Likewise, you can install WordPress on your domains with a single click. Once it is installed, it will list all the installation details under the WordPress session. In that section, you will see an option to log in to the WordPress dashboard, there is no need to know the password. This is only applicable for WordPress which we have installed directly using the Softaculous. If the sites are migrated from the other host, this option will not work. Access WordPress Dashboard from cPanel So, follow the steps given below to log in to your WordPress installation directly from the cPanel. It is a very easy task with a few steps. 1) Login to the cPanel account. 2) Navigate to the “Softaculous Apps Installer” menu and you will see a list of scripts available for us to install. Click on the “WordPress” option to navigate to the WordPress installation section.   3) This action will redirect you to the WordPress installation page. You can install a new WordPress from this section. Also, you will see a list of all the WordPress applications installed using Softaculous on the bottom of the page. On each installation, you can see an admin icon, you can log in to WordPress dashboard by clicking on that icon. Clicking on the icon will redirect you to the WordPress admin section. From the admin section, you can customize your WordPress site or reset the password if you have forgotten the password. So, this is how you can log in to your WordPress site directly from the cPanel. Let us know if you need any help understanding anything regarding this topic. We are happy to help!  
Read more
Cart

No products in the cart.