Re: Location of Web Site Pages (Apache Users)

On Wed, Aug 21, 2024 at 6:31 PM Lawrence Taylor <lawrence@xxxxxxxxxxxxxxx> wrote:

Thanks Yehuda

This is above my expertise so will need to hire someone

Thanks

On Wed, Aug 21, 2024 at 6:27 PM Yehuda Katz <yehuda@xxxxxxxxxx> wrote:
There is no way to know without actually looking at the code. Some PHP applications have a templating engine, some just have includes of different files in different places.
You can search the code for the name of the _javascript_ file.
There are definitely other files that are included from a non-secure URL.
Hopefully the PHP application has a single place where it generates all the URLs, so you just need to find that one place.

The linked _javascript_ and CSS aren't your only issue - you will also need to remove the lines at the top of the .htaccess that force every connection back to not-secure.

- Y

On Wed, Aug 21, 2024 at 8:18 PM Lawrence Taylor <lawrence@xxxxxxxxxxxxxxx> wrote:
Thanks Yehuda

I did a scan at https://www.whynopadlock.com/ and attached are Mixed Content Errors with HTTP and HTTPS. Below is, I believe is the line that needs to be changed.


<script type="text/_javascript_" src="http://www.luxurybeach.com/admin/js/source/jquery-ui/development-bundle/slides.min.jquery.js"></script>
<script type="text/_javascript_">
$(document).ready(function(){
$("#slides").slides({
crossfade: true,
preload: true,
play: 5000,
pause: 2500,
hoverPause: true,
preloadImage: '/admin/images/loading.gif',
effect: 'fade',

Where do you think this code located?

On Wed, Aug 21, 2024 at 12:09 PM Yehuda Katz <yehuda@xxxxxxxxxx> wrote:
I see a lot of absolute links to http resources (and I see the name of the company that made the website). It does not appear to be any off-the-shelf application, it was probably something made specifically for your company.

- Y

On Wed, Aug 21, 2024 at 1:57 PM Lawrence Taylor <lawrence@xxxxxxxxxxxxxxx> wrote:
When you view the source code on the landing page does that tell you anything?

luxurybeach.com

Sent from my iPhone

On 21 Aug 2024, at 11:51 a.m., Yehuda Katz <yehuda@xxxxxxxxxx> wrote:

There are probably no "html" files - the website is generated dynamically by the PHP application.
It looks like the PHP application is linking to insecure URLs for _javascript_ and stylesheets, so when you go to the page with HTTPS, your browser refuses to load those resources and that is why your pages aren't rendered correctly.

- Y

On Wed, Aug 21, 2024 at 1:45 PM Lawrence Taylor <lawrence@xxxxxxxxxxxxxxx> wrote:
Thanks but the html files still exist somewhere though correct?

The purpose of all this is that I am trying to force HTTPS. But when I do the landing page is not rendered properly, and the other pages become error pages.

Sent from my iPhone

On 21 Aug 2024, at 11:32 a.m., Yehuda Katz <yehuda@xxxxxxxxxx> wrote:

Your .htaccess is doing three things:
forwarding all secure traffic to your website to be not secure,
forwarding some requests for specific files to different places,
telling the system to use a ridiculously old version of PHP.

You probably need a PHP developer to look at your application specifically to see how it works.

- Y

On Wed, Aug 21, 2024 at 1:05 PM Lawrence Taylor <lawrence@xxxxxxxxxxxxxxx> wrote:
Hi Yehuda

Here is my .htaccess file, does it show anything?

RewriteCond %{SERVER_PORT} ^443$
RewriteRule (.*) http://www.luxurybeach.com [R=301,L]

redirect 301 /pdf/127/Condo%20Las%20Pe�as%20Vallarta%20 http://www.luxurybeach.com/pdf/127/Condo%20Las%20Pe�as%20Vallarta.pdf
redirect 301 /pdf/139/Residencial%20Molino%20de%20Agua%20 http://www.luxurybeach.com/pdf/139/Residencial%20Molino%20de%20Agua.pdf
redirect 301 /pdf/241/Condo%20Las%20Pe�as%20Vallarta%20 http://www.luxurybeach.com/pdf/241/Condo%20Las%20Pe�as%20Vallarta.pdf
redirect 301 /pdf/307/Bay%20View%20Grand%20 http://www.luxurybeach.com/pdf/307/Bay%20View%20Grand.pdf
redirect 301 /pdf/323/Bay%20View%20Grand%20 http://www.luxurybeach.com/pdf/323/Bay%20View%20Grand.pdf
redirect 301 /pdf/324/Condo%20Casa%20del%20Sol%20-%20Loma%20del%20Mar%20 http://www.luxurybeach.com/pdf/324/Condo%20Casa%20del%20Sol%20-%20Loma%20del%20Mar.pdf
redirect 301 /pdf/341/Condo%20Costa%20Oro%20 http://www.luxurybeach.com/pdf/341/Condo%20Costa%20Oro.pdf
redirect 301 /pdf/348/Condo%20Las%20Vistas%20 http://www.luxurybeach.com/pdf/348/Condo%20Las%20Vistas.pdf
redirect 301 /pdf/84/Condo%20Las%20Pe�itas%20 http://www.luxurybeach.com/pdf/84/Condo%20Las%20Pe�itas.pdf

# php -- BEGIN cPanel-generated handler, do not edit
# Set the “ea-php56” package as the default “PHP” programming language.
<IfModule mime_module>
AddHandler application/x-httpd-ea-php56 .php .php5 .phtml
</IfModule>
# php -- END cPanel-generated handler, do not edit

Regards

Lawrence

On Tue, Aug 20, 2024 at 7:02 PM Yehuda Katz <yehuda@xxxxxxxxxx> wrote:
You have some kind of PHP application running your website. You can check your .htaccess file for RewriteRule or other directives that affect requests and direct them to the application. There isn't enough information in the screenshots to see whether it is a custom application or something off the shelf.

- Y

Sent from a device with a very small keyboard and hyperactive autocorrect.

On Tue, Aug 20, 2024, 8:16 PM Lawrence Taylor <lawrence@xxxxxxxxxxxxxxx> wrote:
Yehuda

I attach the images of the directories in CPanel for the web site user. These directories do not have html files.

What do you suggest now?

Regards

Lawrence

On Tue, Aug 20, 2024 at 2:36 PM Lawrence Taylor <lawrence@xxxxxxxxxxxxxxx> wrote:
Thanks Yahuda I will try that!

Sent from my iPhone

On 20 Aug 2024, at 2:28 p.m., Yehuda Katz <yehuda@xxxxxxxxxx> wrote:

Based on the links you posted, it looks like your server is running cPanel. cPanel stores each website it hosts in its own user directory.
You need to figure out which user your website is running as, then look at the public_html directory in the user account's home directory.
If a single cPanel account has multiple associated domains, they can have different paths, but that is a cPanel question, not an HTTPD question.

- Y

On Tue, Aug 20, 2024 at 4:19 PM Lawrence Taylor <lawrence@xxxxxxxxxxxxxxx.invalid> wrote:
Hi

I have been trying to find the location of the actual html pages that you see on my website so I can edit them. But in my document root I only have

400.shtml 229 28-Oct-2021 07:25:02 root(0)/root(0) 644
401.shtml 207 28-Oct-2021 07:25:02 root(0)/root(0) 644
403.shtml 203 28-Oct-2021 07:25:02 root(0)/root(0) 644
404.shtml 203 28-Oct-2021 07:25:02 root(0)/root(0) 644
413.shtml 216 28-Oct-2021 07:25:02 root(0)/root(0) 644
500.shtml 243 28-Oct-2021 07:25:02 root(0)/root(0) 644
cp_errordocument.shtml 10.2k 28-Oct-2021 07:25:02 root(0)/root(0) 644
index.html 163 28-Oct-2021 07:25:02 root(0)/root(0) 644
Where is the html code that you can see in a browser?

Thanks

Lawrence

--

La información de este correo electrónico y/o los archivos adjuntos a este, es/son estrictamente confidencial (es) y puede (n) contener algunos privilegios legales. Este comunicado fue elaborado únicamente para el uso de la o las personas físicas o morales a quien (es) se dirige. Si usted no es alguna de esas personas, haga favor de contactar a quien lo envió, ignore, borre y/o destruya el correo electrónico. Queda estrictamente prohibido por personas ajenas, el uso, revisión, retransmisión, dispersión, revelación, copia, distribución o cualquier otro uso o acción que tome o se omita tomar. Cualquier opinión, propuesta o sugerencia contenidas en este comunicado que sean específicamente dirigidas a nuestro (s) cliente (s), estarán sujetas a los términos y condiciones establecidos en los acuerdos y documentos previamente firmados con dichos clientes y por Luxury Beach Fine Beach Estates (Bahias de Lujo Realty S. de R.L. de C.V.).

The information contained in this email and/or the file (s) attached, is/are strictly confidential and may contain legal privileges. This email was solely prepared for the use of the person (s), entity (ies), company (ies) which it is addressed. If you are not any of the mentioned people or addressee, please contact the sender and ignore, delete and/or destroy the email. It is strictly prohibited that a non-addressee, uses, reviews, retransmits, disseminates, discloses, copies, distributes or any other use or action taken or omitted. Any opinion, proposal or suggestion, contained in this email which is addressed to our client (s), is/are subject to the terms and conditions established in the agreements and documents previously signed by the client (s) and Luxury Beach Fine Beach Estates (Bahias de Lujo Realty, S. de R.L. de C.V.

En relación al Aviso de Privacidad, a que se refiere la Ley Federal de Protección de Datos Personales en Posesión de los Particulares, el mismo se puede consultar en la página de Luxury Beach Fine Beach Estates (Bahias de Lujo Realty, S. de R.L. de C.V.) en la siguiente dirección: www.luxurybeach.com/privacy

--

La información de este correo electrónico y/o los archivos adjuntos a este, es/son estrictamente confidencial (es) y puede (n) contener algunos privilegios legales. Este comunicado fue elaborado únicamente para el uso de la o las personas físicas o morales a quien (es) se dirige. Si usted no es alguna de esas personas, haga favor de contactar a quien lo envió, ignore, borre y/o destruya el correo electrónico. Queda estrictamente prohibido por personas ajenas, el uso, revisión, retransmisión, dispersión, revelación, copia, distribución o cualquier otro uso o acción que tome o se omita tomar. Cualquier opinión, propuesta o sugerencia contenidas en este comunicado que sean específicamente dirigidas a nuestro (s) cliente (s), estarán sujetas a los términos y condiciones establecidos en los acuerdos y documentos previamente firmados con dichos clientes y por Luxury Beach Fine Beach Estates (Bahias de Lujo Realty S. de R.L. de C.V.).

The information contained in this email and/or the file (s) attached, is/are strictly confidential and may contain legal privileges. This email was solely prepared for the use of the person (s), entity (ies), company (ies) which it is addressed. If you are not any of the mentioned people or addressee, please contact the sender and ignore, delete and/or destroy the email. It is strictly prohibited that a non-addressee, uses, reviews, retransmits, disseminates, discloses, copies, distributes or any other use or action taken or omitted. Any opinion, proposal or suggestion, contained in this email which is addressed to our client (s), is/are subject to the terms and conditions established in the agreements and documents previously signed by the client (s) and Luxury Beach Fine Beach Estates (Bahias de Lujo Realty, S. de R.L. de C.V.

En relación al Aviso de Privacidad, a que se refiere la Ley Federal de Protección de Datos Personales en Posesión de los Particulares, el mismo se puede consultar en la página de Luxury Beach Fine Beach Estates (Bahias de Lujo Realty, S. de R.L. de C.V.) en la siguiente dirección: www.luxurybeach.com/privacy

--

La información de este correo electrónico y/o los archivos adjuntos a este, es/son estrictamente confidencial (es) y puede (n) contener algunos privilegios legales. Este comunicado fue elaborado únicamente para el uso de la o las personas físicas o morales a quien (es) se dirige. Si usted no es alguna de esas personas, haga favor de contactar a quien lo envió, ignore, borre y/o destruya el correo electrónico. Queda estrictamente prohibido por personas ajenas, el uso, revisión, retransmisión, dispersión, revelación, copia, distribución o cualquier otro uso o acción que tome o se omita tomar. Cualquier opinión, propuesta o sugerencia contenidas en este comunicado que sean específicamente dirigidas a nuestro (s) cliente (s), estarán sujetas a los términos y condiciones establecidos en los acuerdos y documentos previamente firmados con dichos clientes y por Luxury Beach Fine Beach Estates (Bahias de Lujo Realty S. de R.L. de C.V.).

The information contained in this email and/or the file (s) attached, is/are strictly confidential and may contain legal privileges. This email was solely prepared for the use of the person (s), entity (ies), company (ies) which it is addressed. If you are not any of the mentioned people or addressee, please contact the sender and ignore, delete and/or destroy the email. It is strictly prohibited that a non-addressee, uses, reviews, retransmits, disseminates, discloses, copies, distributes or any other use or action taken or omitted. Any opinion, proposal or suggestion, contained in this email which is addressed to our client (s), is/are subject to the terms and conditions established in the agreements and documents previously signed by the client (s) and Luxury Beach Fine Beach Estates (Bahias de Lujo Realty, S. de R.L. de C.V.

En relación al Aviso de Privacidad, a que se refiere la Ley Federal de Protección de Datos Personales en Posesión de los Particulares, el mismo se puede consultar en la página de Luxury Beach Fine Beach Estates (Bahias de Lujo Realty, S. de R.L. de C.V.) en la siguiente dirección: www.luxurybeach.com/privacy

--

La información de este correo electrónico y/o los archivos adjuntos a este, es/son estrictamente confidencial (es) y puede (n) contener algunos privilegios legales. Este comunicado fue elaborado únicamente para el uso de la o las personas físicas o morales a quien (es) se dirige. Si usted no es alguna de esas personas, haga favor de contactar a quien lo envió, ignore, borre y/o destruya el correo electrónico. Queda estrictamente prohibido por personas ajenas, el uso, revisión, retransmisión, dispersión, revelación, copia, distribución o cualquier otro uso o acción que tome o se omita tomar. Cualquier opinión, propuesta o sugerencia contenidas en este comunicado que sean específicamente dirigidas a nuestro (s) cliente (s), estarán sujetas a los términos y condiciones establecidos en los acuerdos y documentos previamente firmados con dichos clientes y por Luxury Beach Fine Beach Estates (Bahias de Lujo Realty S. de R.L. de C.V.).

The information contained in this email and/or the file (s) attached, is/are strictly confidential and may contain legal privileges. This email was solely prepared for the use of the person (s), entity (ies), company (ies) which it is addressed. If you are not any of the mentioned people or addressee, please contact the sender and ignore, delete and/or destroy the email. It is strictly prohibited that a non-addressee, uses, reviews, retransmits, disseminates, discloses, copies, distributes or any other use or action taken or omitted. Any opinion, proposal or suggestion, contained in this email which is addressed to our client (s), is/are subject to the terms and conditions established in the agreements and documents previously signed by the client (s) and Luxury Beach Fine Beach Estates (Bahias de Lujo Realty, S. de R.L. de C.V.

En relación al Aviso de Privacidad, a que se refiere la Ley Federal de Protección de Datos Personales en Posesión de los Particulares, el mismo se puede consultar en la página de Luxury Beach Fine Beach Estates (Bahias de Lujo Realty, S. de R.L. de C.V.) en la siguiente dirección: www.luxurybeach.com/privacy

--

La información de este correo electrónico y/o los archivos adjuntos a este, es/son estrictamente confidencial (es) y puede (n) contener algunos privilegios legales. Este comunicado fue elaborado únicamente para el uso de la o las personas físicas o morales a quien (es) se dirige. Si usted no es alguna de esas personas, haga favor de contactar a quien lo envió, ignore, borre y/o destruya el correo electrónico. Queda estrictamente prohibido por personas ajenas, el uso, revisión, retransmisión, dispersión, revelación, copia, distribución o cualquier otro uso o acción que tome o se omita tomar. Cualquier opinión, propuesta o sugerencia contenidas en este comunicado que sean específicamente dirigidas a nuestro (s) cliente (s), estarán sujetas a los términos y condiciones establecidos en los acuerdos y documentos previamente firmados con dichos clientes y por Luxury Beach Fine Beach Estates (Bahias de Lujo Realty S. de R.L. de C.V.).

The information contained in this email and/or the file (s) attached, is/are strictly confidential and may contain legal privileges. This email was solely prepared for the use of the person (s), entity (ies), company (ies) which it is addressed. If you are not any of the mentioned people or addressee, please contact the sender and ignore, delete and/or destroy the email. It is strictly prohibited that a non-addressee, uses, reviews, retransmits, disseminates, discloses, copies, distributes or any other use or action taken or omitted. Any opinion, proposal or suggestion, contained in this email which is addressed to our client (s), is/are subject to the terms and conditions established in the agreements and documents previously signed by the client (s) and Luxury Beach Fine Beach Estates (Bahias de Lujo Realty, S. de R.L. de C.V.

En relación al Aviso de Privacidad, a que se refiere la Ley Federal de Protección de Datos Personales en Posesión de los Particulares, el mismo se puede consultar en la página de Luxury Beach Fine Beach Estates (Bahias de Lujo Realty, S. de R.L. de C.V.) en la siguiente dirección: www.luxurybeach.com/privacy

<!-- New Index Starting -->
	<script type="text/_javascript_" src="http://www.luxurybeach.com/admin/js/source/jquery-ui/development-bundle/slides.min.jquery.js"></script>
	<script type="text/_javascript_">
	$(document).ready(function(){
	$("#slides").slides({
	crossfade: true,
	preload: true,
	play: 5000,
	pause: 2500,
	hoverPause: true,
	preloadImage: '/admin/images/loading.gif',
	effect: 'fade',
Where do you think this code located?

400.shtml	229	28-Oct-2021 07:25:02	root(0)/root(0)	644
401.shtml	207	28-Oct-2021 07:25:02	root(0)/root(0)	644
403.shtml	203	28-Oct-2021 07:25:02	root(0)/root(0)	644
404.shtml	203	28-Oct-2021 07:25:02	root(0)/root(0)	644
413.shtml	216	28-Oct-2021 07:25:02	root(0)/root(0)	644
500.shtml	243	28-Oct-2021 07:25:02	root(0)/root(0)	644
cp_errordocument.shtml	10.2k	28-Oct-2021 07:25:02	root(0)/root(0)	644
index.html	163	28-Oct-2021 07:25:02	root(0)/root(0)	644