Server logs

Ye' old general discussion board. Basically, for everything that isn't covered elsewhere. Come here to shoot the breeze, shoot your mouth off, or whatever suits your fancy.
This forum is not for asking programming related questions.

Moderator: General Moderators

Post Reply
alex.barylski
DevNet Evangelist
Posts: 6267
Joined: Tue Dec 21, 2004 5:00 pm
Location: Winnipeg

Server logs

Post by alex.barylski »

I have a client who claims to have just been hacked due to an vulnerability in one of the apps I support and actively develop. I'm not convinced it was directly a result of my application, but I would like to examine their log files and see what I can some up with.

Do PHP and Apache maintain logs which I can check? Are their options I can enable/disable to allow logging, etc?

What are the names of the log files?
User avatar
Jenk
DevNet Master
Posts: 3587
Joined: Mon Sep 19, 2005 6:24 am
Location: London

Post by Jenk »

$SERVERROOT/logs
- error.log
- access.log
- ssl_request.log
impulse()
Forum Regular
Posts: 748
Joined: Wed Aug 09, 2006 8:36 am
Location: Staffordshire, UK
Contact:

Post by impulse() »

The logs on my Fedora Core box are located at /var/log
User avatar
Chris Corbyn
Breakbeat Nuttzer
Posts: 13098
Joined: Wed Mar 24, 2004 7:57 am
Location: Melbourne, Australia

Post by Chris Corbyn »

Yep, most systems will set the log path to /var/log/<whatever>

EDIT | You could so easily have googled this by the way 8O
alex.barylski
DevNet Evangelist
Posts: 6267
Joined: Tue Dec 21, 2004 5:00 pm
Location: Winnipeg

Post by alex.barylski »

I did Google and got this, mostly PHP error logging functions...I need actual PHP logs :)

http://www.google.ca/search?hl=en&q=PHP+logs&meta=
nickvd
DevNet Resident
Posts: 1027
Joined: Thu Mar 10, 2005 5:27 pm
Location: Southern Ontario
Contact:

Post by nickvd »

You probably won't find PHP logs. While you are able to turn on logging of php errors/warnings etc, I would be surprised to find a host that turned it on. You will however, find the apache logs...
User avatar
RobertGonzalez
Site Administrator
Posts: 14293
Joined: Tue Sep 09, 2003 6:04 pm
Location: Fremont, CA, USA

Post by RobertGonzalez »

I usually check my server logs. Although I am not sure you are going to find the issue there. But I would suggest checking the error_log and the access_log (on Apache anyway) to see if you can trace down what took place when.
Post Reply