[Security Issue] "host" command being run through my forum

[boogiedown]

My server has been running high lately so a had a friend check it out. He noted that there was 7000 zombie. He new the problem might be someone or something running script through php. Well he temporarily fixed the problem by removing permissions from the "host" command, so apache cant execute the host command anymore. "someone is executing tons of host commands, trying to resolve IP addresses to hostnames". he didnt know too much info on this forum so im just passing the word along if anyone finds this usefull. I did noticed that the zombies did go back to 0, but the server load is still high. he said itshould go down once the script new it cant run anymore

[unknown] im sure you are aware of my issues with my site, getbig. If you can help out, let me know.


running
SMF 1.1 RC2
http://www.getbig.com/php_info.php

[Trekkie101]

"disable hostname lookups" in the features and settings panel.

[boogiedown]

im using 1.1 rc2 and cant seem to find that. where is it?

[Sverre]

Admin > Features and Options > Layout and Options > check Disable hostname lookups?

[boogiedown]

thanks, got it!