I get the next message when testing a new basic contact form

Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.

Please contact the server administrator, webmaster@nomas.org and inform them of the time the error occurred, and anything you might have done that may have caused the error.

More information about this error may be available in the server error log.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

the support of my hosting ask me the next details to check the problem

1)Your Master Domain Name
2)Your Full Name
3)Cpanel Username
4)Cpanel Password
5)What IP Address Are You Trying To Publish To

Cpanel username and cpanel password? i really do not know if is normal that a support service ask their clients such a confidential information or if this is really necessary to solve the problem i have mentioned above but i do not feel comfortable giving others that information even if is people of my hosting service

Some comments on this woud be really appreciated

I would assume that them been your admin that they could access your stuff without knowing your username and password though they may request it to login and see whats what (I do this with my sites sometimes when supporting).

I would feel most comfortable if I knew who I was corresponding with and avoid suspect telephone enquiries unless you have called them.

What does your script do to throw an internal error. Do your other scripts work?

Ibbo

Originally Posted by ibbo

I would assume that them been your admin that they could access your stuff without knowing your username and password though they may request it to login and see whats what (I do this with my sites sometimes when supporting).

I would feel most comfortable if I knew who I was corresponding with and avoid suspect telephone enquiries unless you have called them.

What does your script do to throw an internal error. Do your other scripts work?

Ibbo

Do you really mean that i di not know it was possible to log into Cpanels for the host server even if you change the password you got originally,

some web sites have information that they could consider completly confidential, not mine of course, but i am sure there are this kind of sites like goverment sites for example.

even so i guess they coul send me instructions to modify in my cpanel what is needed thanks for your answer anyway

No as admin they can access any page on your site because they hold the root account. This means no matter how many times you change your password theyc an still access your stuff. So yes your confidential information IS Accessible by your ISP admins.

However dont loose any sleep, these chaps are not interested in your data they simply want to host your site smooth as possible.

Inside your cpanel you shgould have a link for your error logs. Click on that then the 500 image and youn get a list off whats caused errors. You should be able to pickup whats wrong from that report. If not post it and we can take a look for you.

Ibbo

Well this all i could find refering to the php script of my contact form

Error Log
Last 300 Error Log Messages in reverse order: [2006-07-03 04:33:06]: error: file is writable by others: (/home/tctint/public_html/processingpage.php)
[2006-07-03 03:42:34]: error: file is writable by others: (/home/tctint/public_html/processingpage.php)

and this is the php of the form

<?PHP
// Receiving variables
@$name = addslashes($_POST['name']);
@$email = addslashes($_POST['email']);
@$comments = addslashes($_POST['comments']);
$commentsl = ereg_replace('@', '(.)', $commentsl);
// error checking
if (strlen($name) == 0 )
{
header("Location: name_error.html");
exit;
}
if (strlen($email) == 0 )
{
header("Location: email_error.html");
exit;
}
if (! ereg('[A-Za-z0-9_-]+\@[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+', $email))
{
header("Location: email_error.html");
exit;
}
if (substr_count($comments, '@') > "2")
{
header("Location: comments_error.html");
exit;
}
//Sending Email to form owner
$mailto = "webmaster@nomas.com";
$mailsubj = "Feedback from My website form";
$mailhead = "From: $email\n";
reset ($HTTP_POST_VARS);
$mailbody = "Values submitted from my web site form:\n";
while (list ($key, $val) = each ($HTTP_POST_VARS))
{
$mailbody .= "$key : $val\n";
}
mail($mailto, $mailsubj, $mailbody, $mailhead);
header("Location: confirmationpage.html");
?>

Well you can give your ISP a pat on the back coz they have just saved (your skin) but more importantly their own skin.

Your script has 777 permisions which ( had your ISP not noticed ) would lead to a direct exploitation of the directory where that script resides. This leads to many a weird thing going on. Supprisingly they dont appear to attack you they are after the server information so they can potentialy build up a profile to exploit that server.

Solution is to delete that script from the server. Change the file permisions to 0755 (never give 777 permisions) and upload the file back to the server and try again.

Ibbo

[quote=

Solution is to delete that script from the server. Change the file permisions to 0755 (never give 777 permisions) and upload the file back to the server and try again.

Ibbo[/quote]

well i have just deleted the file, but no idea how to change the permissions i know where to find this feature in file manager on the right hand, but not exactly what to change there

a couple of days ago i had to change the permissions of an entire folder that had to be installed on the server i change the folder file by file from 644 to 755 clicking right on the files and choosing properties

do i have to change the permissions of the php file before uploading or this is done after i have uploaded to the server

Its best to do so first, Your FTP program has (or should have chmod built into it) you can do this here and you should be able to run it.

As you ISP wont allow exe files to run anyway its safe to have it on the server (but in practice dont put them on).

Ibbo

you where right it's now working, thanks a lot..