=== SERVER DUMP === === FILE: /home/osbs/public_html/application/config/database.php === '', 'hostname' => 'localhost', 'username' => 'osbs_conn', 'password' => '4x{Aa?}yITB_', 'database' => 'osbs_site', 'dbdriver' => 'mysqli', 'dbprefix' => '', 'pconnect' => FALSE, 'db_debug' => (ENVIRONMENT !== 'production'), 'cache_on' => FALSE, 'cachedir' => '', 'char_set' => 'utf8', 'dbcollat' => 'utf8_general_ci', 'swap_pre' => '', 'encrypt' => FALSE, 'compress' => FALSE, 'stricton' => FALSE, 'failover' => array(), 'save_queries' => TRUE ); === FILE: /etc/passwd === root:x:0:0:root:/root:/bin/bash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin sync:x:5:0:sync:/sbin:/bin/sync shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown halt:x:7:0:halt:/sbin:/sbin/halt mail:x:8:12:mail:/var/spool/mail:/sbin/nologin operator:x:11:0:operator:/root:/sbin/nologin games:x:12:100:games:/usr/games:/sbin/nologin ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin nobody:x:99:99:Nobody:/:/sbin/nologin systemd-network:x:192:192:systemd Network Management:/:/sbin/nologin dbus:x:81:81:System message bus:/:/sbin/nologin polkitd:x:999:998:User for polkitd:/:/sbin/nologin libstoragemgmt:x:998:997:daemon account for libstoragemgmt:/var/run/lsm:/sbin/nologin abrt:x:173:173::/etc/abrt:/sbin/nologin rpc:x:32:32:Rpcbind Daemon:/var/lib/rpcbind:/sbin/nologin sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin postfix:x:89:89::/var/spool/postfix:/sbin/nologin chrony:x:997:995::/var/lib/chrony:/sbin/nologin ntp:x:38:38::/etc/ntp:/sbin/nologin tcpdump:x:72:72::/:/sbin/nologin gluster:x:996:993:GlusterFS daemons:/run/gluster:/sbin/nologin nscd:x:28:28:NSCD Daemon:/:/sbin/nologin named:x:25:25:Named:/var/named:/sbin/nologin cpanel:x:201:201::/var/cpanel/userhomes/cpanel:/usr/local/cpanel/bin/noshell cpanellogin:x:202:202::/var/cpanel/userhomes/cpanellogin:/usr/local/cpanel/bin/noshell cpaneleximfilter:x:203:203::/var/cpanel/userhomes/cpaneleximfilter:/usr/local/cpanel/bin/noshell cpaneleximscanner:x:204:204::/var/cpanel/userhomes/cpaneleximscanner:/usr/local/cpanel/bin/noshell cpanelconnecttrack:x:205:205::/var/cpanel/userhomes/cpanelconnecttrack:/usr/local/cpanel/bin/noshell cpanelanalytics:x:206:206::/var/cpanel/userhomes/cpanelanalytics:/usr/local/cpanel/bin/noshell cpanelcabcache:x:207:207::/var/cpanel/userhomes/cpanelcabcache:/usr/local/cpanel/bin/noshell cpanelroundcube:x:208:208::/var/cpanel/userhomes/cpanelroundcube:/usr/local/cpanel/bin/noshell mailman:x:209:209::/usr/local/cpanel/3rdparty/mailman:/usr/local/cpanel/bin/noshell dovecot:x:97:97:Dovecot IMAP server:/usr/libexec/dovecot:/sbin/nologin dovenull:x:995:992:Dovecot's unauthorized user:/usr/libexec/dovecot:/sbin/nologin mailnull:x:47:47:Exim:/var/spool/mqueue:/bin/false cpanelphpmyadmin:x:994:990:phpMyAdmin for cPanel & WHM:/var/cpanel/userhomes/cpanelphpmyadmin:/usr/local/cpanel/bin/noshell cpanelphppgadmin:x:993:989:phpPgAdmin for cPanel & WHM:/var/cpanel/userhomes/cpanelphppgadmin:/usr/local/cpanel/bin/noshell mysql:x:27:27:MySQL Server:/var/lib/mysql:/bin/false cpses:x:992:988::/var/cpanel/cpses:/sbin/nologin hgtransf:x:1004:1003::/home/hgtransf:/bin/bash osbsoftw:x:1005:1004::/home/osbsoftw:/usr/local/cpanel/bin/noshell _imunify:x:991:984::/home/_imunify:/bin/false loonar:x:1007:1006::/home/loonar:/bin/false loonarcloud:x:1008:1007::/home/loonarcloud:/usr/local/cpanel/bin/noshell root2:x:0:0:root:/root:/bin/bash rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin osbs:x:1011:1010::/home/osbs:/usr/local/cpanel/bin/noshell hmgosbsoftware:x:1013:1012::/home/hmgosbsoftware:/usr/local/cpanel/bin/noshell servicesosbsoftw:x:1015:1014::/home/servicesosbsoftw:/usr/local/cpanel/bin/noshell lpuserosb:x:1016:1015::/home/lpuserosb:/usr/local/cpanel/bin/noshell usbdronedeploy:x:1017:1016::/home/usbdronedeploy:/usr/local/cpanel/bin/noshell === FILE: /etc/hostname === vps-5607130.osbsoftware.com === FILE: /home/osbs/public_html/.htaccess === # ========================================= # OSB - .htaccess (Performance + Security) # SAFE MODE (compatível com hosts restritos) # ========================================= RewriteEngine On RewriteBase / # Bloquear listagem de diretórios e definir arquivos de índice Options -Indexes DirectoryIndex index.php index.html # ------------------------------------------------- # 1) BLOQUEIOS RÁPIDOS (antes do roteamento) # ------------------------------------------------- # 1.1) Limitar métodos HTTP (reduz vetor de ataque) RewriteCond %{REQUEST_METHOD} !^(GET|POST|HEAD)$ [NC] RewriteRule .* - [F] # 1.2) Bloquear padrões comuns de ataques via querystring # OBS: se sua busca aceita caracteres especiais, pode ajustar depois. RewriteCond %{QUERY_STRING} (\.\./|%2e%2e%2f) [NC,OR] RewriteCond %{QUERY_STRING} (union(\s|%20)+select|select.+from|insert(\s|%20)+into|drop(\s|%20)+table|update(\s|%20)+.+set|benchmark\(|sleep\() [NC,OR] RewriteCond %{QUERY_STRING} (<|%3c|>|%3e|%27|%22|%60) [NC] RewriteRule .* - [F,L] # ------------------------------------------------- # 2) HEADERS (Segurança + Cache SAFE) # ------------------------------------------------- # ---- Segurança (base) Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" # CSP básica (compatível; mantém 'unsafe-inline' para evitar quebrar template antigo) Header set Content-Security-Policy "default-src 'self' https: data:; img-src 'self' https: data:; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline'; font-src 'self' https: data:; object-src 'none'; base-uri 'self'; frame-ancestors 'self';" # Permissões do browser (reduz abuso de sensores) Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" # Evita expor tecnologia (pode não surtir efeito em alguns hosts) Header unset X-Powered-By Header unset Server # ---- Performance (SAFE MODE) # Cache forte para estáticos (se você versiona arquivos, melhor ainda) Header set Cache-Control "public, max-age=31536000" # Cache curto para HTML (evita conteúdo preso) Header set Cache-Control "public, max-age=300" # Limpa pragma antigo (evita conflitos de cache) Header unset Pragma # ------------------------------------------------- # 3) BLOQUEAR ARQUIVOS SENSÍVEIS # ------------------------------------------------- Require all denied # Bloqueia diretórios que não devem ser públicos (ajuste se algum for público no seu projeto) RedirectMatch 403 ^/(application|database|class|vendor)/? # ------------------------------------------------- # 4) REDIRECIONAMENTOS (mantidos do seu original) # ------------------------------------------------- # Redirecionamento HTTP para HTTPS RewriteCond %{HTTPS} off RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301] RewriteCond %{REQUEST_URI} ^/page/idioma$ RewriteRule ^(.*)$ https://osbsoftware.com.br/ [R=301,L] # ------------------------------------------------- # 5) ROTEAMENTO PARA index.php (mantido do seu original) # ------------------------------------------------- # Se a solicitação não corresponder a um arquivo existente RewriteCond %{REQUEST_FILENAME} !-f # E se a solicitação não corresponder a um diretório existente RewriteCond %{REQUEST_FILENAME} !-d # E se a solicitação não for para um recurso estático RewriteCond %{REQUEST_URI} !\.(css|js|png|jpg|jpeg|gif|webp|svg|ico|woff|woff2|ttf|eot|otf|pdf)$ [NC] # Encaminhe a solicitação para index.php com a string de consulta original RewriteRule ^(.*)$ index.php/$1 [L] # ------------------------------------------------- # 6) PHP HANDLER (cPanel - mantido do seu original) # ------------------------------------------------- # php -- BEGIN cPanel-generated handler, do not edit # Defina o pacote “ea-php71” como a linguagem padrão de programação “PHP”. AddHandler application/x-httpd-ea-php71 .php .php7 .phtml # php -- END cPanel-generated handler, do not edit === FILE: /home/osbs/public_html/application/config/config.php === ]+$/i | | DO NOT CHANGE THIS UNLESS YOU FULLY UNDERSTAND THE REPERCUSSIONS!! | */ $config['permitted_uri_chars'] = 'a-z 0-9~%.:_\-='; /* |-------------------------------------------------------------------------- | Enable Query Strings |-------------------------------------------------------------------------- | | By default CodeIgniter uses search-engine friendly segment based URLs: | example.com/who/what/where/ | | By default CodeIgniter enables access to the $_GET array. If for some | reason you would like to disable it, set 'allow_get_array' to FALSE. | | You can optionally enable standard query string based URLs: | example.com?who=me&what=something&where=here | | Options are: TRUE or FALSE (boolean) | | The other items let you set the query string 'words' that will | invoke your controllers and its functions: | example.com/index.php?c=controller&m=function | | Please note that some of the helpers won't work as expected when | this feature is enabled, since CodeIgniter is designed primarily to | use segment based URLs. | */ $config['allow_get_array'] = TRUE; $config['enable_query_strings'] = FALSE; $config['controller_trigger'] = 'c'; $config['function_trigger'] = 'm'; $config['directory_trigger'] = 'd'; /* |-------------------------------------------------------------------------- | Error Logging Threshold |-------------------------------------------------------------------------- | | You can enable error logging by setting a threshold over zero. The | threshold determines what gets logged. Threshold options are: | | 0 = Disables logging, Error logging TURNED OFF | 1 = Error Messages (including PHP errors) | 2 = Debug Messages | 3 = Informational Messages | 4 = All Messages | | You can also pass an array with threshold levels to show individual error types | | array(2) = Debug Messages, without Error Messages | | For a live site you'll usually only enable Errors (1) to be logged otherwise | your log files will fill up very fast. | */ $config['log_threshold'] = 0; /* |-------------------------------------------------------------------------- | Error Logging Directory Path |-------------------------------------------------------------------------- | | Leave this BLANK unless you would like to set something other than the default | application/logs/ directory. Use a full server path with trailing slash. | */ $config['log_path'] = ''; /* |-------------------------------------------------------------------------- | Log File Extension |-------------------------------------------------------------------------- | | The default filename extension for log files. The default 'php' allows for | protecting the log files via basic scripting, when they are to be stored | under a publicly accessible directory. | | Note: Leaving it blank will default to 'php'. | */ $config['log_file_extension'] = ''; /* |-------------------------------------------------------------------------- | Log File Permissions |-------------------------------------------------------------------------- | | The file system permissions to be applied on newly created log files. | | IMPORTANT: This MUST be an integer (no quotes) and you MUST use octal | integer notation (i.e. 0700, 0644, etc.) */ $config['log_file_permissions'] = 0644; /* |-------------------------------------------------------------------------- | Date Format for Logs |-------------------------------------------------------------------------- | | Each item that is logged has an associated date. You can use PHP date | codes to set your own date formatting | */ $config['log_date_format'] = 'Y-m-d H:i:s'; /* |-------------------------------------------------------------------------- | Error Views Directory Path |-------------------------------------------------------------------------- | | Leave this BLANK unless you would like to set something other than the default | application/views/errors/ directory. Use a full server path with trailing slash. | */ $config['error_views_path'] = ''; /* |-------------------------------------------------------------------------- | Cache Directory Path |-------------------------------------------------------------------------- | | Leave this BLANK unless you would like to set something other than the default | application/cache/ directory. Use a full server path with trailing slash. | */ $config['cache_path'] = ''; /* |-------------------------------------------------------------------------- | Cache Include Query String |-------------------------------------------------------------------------- | | Whether to take the URL query string into consideration when generating | output cache files. Valid options are: | | FALSE = Disabled | TRUE = Enabled, take all query parameters into account. | Please be aware that this may result in numerous cache | files generated for the same page over and over again. | array('q') = Enabled, but only take into account the specified list | of query parameters. | */ $config['cache_query_string'] = FALSE; /* |-------------------------------------------------------------------------- | Encryption Key |-------------------------------------------------------------------------- | | If you use the Encryption class, you must set an encryption key. | See the user guide for more info. | | https://codeigniter.com/user_guide/libraries/encryption.html | */ $config['encryption_key'] = ''; /* |-------------------------------------------------------------------------- | Session Variables |-------------------------------------------------------------------------- | | 'sess_driver' | | The storage driver to use: files, database, redis, memcached | | 'sess_cookie_name' | | The session cookie name, must contain only [0-9a-z_-] characters | | 'sess_expiration' | | The number of SECONDS you want the session to last. | Setting to 0 (zero) means expire when the browser is closed. | | 'sess_save_path' | | The location to save sessions to, driver dependent. | | For the 'files' driver, it's a path to a writable directory. | WARNING: Only absolute paths are supported! | | For the 'database' driver, it's a table name. | Please read up the manual for the format with other session drivers. | | IMPORTANT: You are REQUIRED to set a valid save path! | | 'sess_match_ip' | | Whether to match the user's IP address when reading the session data. | | WARNING: If you're using the database driver, don't forget to update | your session table's PRIMARY KEY when changing this setting. | | 'sess_time_to_update' | | How many seconds between CI regenerating the session ID. | | 'sess_regenerate_destroy' | | Whether to destroy session data associated with the old session ID | when auto-regenerating the session ID. When set to FALSE, the data | will be later deleted by the garbage collector. | | Other session cookie settings are shared with the rest of the application, | except for 'cookie_prefix' and 'cookie_httponly', which are ignored here. | */ $config['sess_driver'] = 'files'; $config['sess_cookie_name'] = 'mysession'; $config['sess_expiration'] = (60 * 60); $config['sess_save_path'] = FCPATH . "sessions"; $config['sess_match_ip'] = FALSE; $config['sess_time_to_update'] = 300; $config['sess_regenerate_destroy'] = TRUE; /* |-------------------------------------------------------------------------- | Cookie Related Variables |-------------------------------------------------------------------------- | | 'cookie_prefix' = Set a cookie name prefix if you need to avoid collisions | 'cookie_domain' = Set to .your-domain.com for site-wide cookies | 'cookie_path' = Typically will be a forward slash | 'cookie_secure' = Cookie will only be set if a secure HTTPS connection exists. | 'cookie_httponly' = Cookie will only be accessible via HTTP(S) (no javascript) | | Note: These settings (with the exception of 'cookie_prefix' and | 'cookie_httponly') will also affect sessions. | */ $config['cookie_prefix'] = ''; $config['cookie_domain'] = ''; $config['cookie_path'] = '/'; $config['cookie_secure'] = FALSE; $config['cookie_httponly'] = FALSE; /* |-------------------------------------------------------------------------- | Standardize newlines |-------------------------------------------------------------------------- | | Determines whether to standardize newline characters in input data, | meaning to replace \r\n, \r, \n occurrences with the PHP_EOL value. | | This is particularly useful for portability between UNIX-based OSes, | (usually \n) and Windows (\r\n). | */ $config['standardize_newlines'] = FALSE; /* |-------------------------------------------------------------------------- | Global XSS Filtering |-------------------------------------------------------------------------- | | Determines whether the XSS filter is always active when GET, POST or | COOKIE data is encountered | | WARNING: This feature is DEPRECATED and currently available only | for backwards compatibility purposes! | */ $config['global_xss_filtering'] = FALSE; /* |-------------------------------------------------------------------------- | Cross Site Request Forgery |-------------------------------------------------------------------------- | Enables a CSRF cookie token to be set. When set to TRUE, token will be | checked on a submitted form. If you are accepting user data, it is strongly | recommended CSRF protection be enabled. | | 'csrf_token_name' = The token name | 'csrf_cookie_name' = The cookie name | 'csrf_expire' = The number in seconds the token should expire. | 'csrf_regenerate' = Regenerate token on every submission | 'csrf_exclude_uris' = Array of URIs which ignore CSRF checks */ $config['csrf_protection'] = FALSE; $config['csrf_token_name'] = 'csrf_test_name'; $config['csrf_cookie_name'] = 'csrf_cookie_name'; $config['csrf_expire'] = 7200; $config['csrf_regenerate'] = TRUE; $config['csrf_exclude_uris'] = array(); /* |-------------------------------------------------------------------------- | Output Compression |-------------------------------------------------------------------------- | | Enables Gzip output compression for faster page loads. When enabled, | the output class will test whether your server supports Gzip. | Even if it does, however, not all browsers support compression | so enable only if you are reasonably sure your visitors can handle it. | | Only used if zlib.output_compression is turned off in your php.ini. | Please do not use it together with httpd-level output compression. | | VERY IMPORTANT: If you are getting a blank page when compression is enabled it | means you are prematurely outputting something to your browser. It could | even be a line of whitespace at the end of one of your scripts. For | compression to work, nothing can be sent before the output buffer is called | by the output class. Do not 'echo' any values with compression enabled. | */ $config['compress_output'] = FALSE; /* |-------------------------------------------------------------------------- | Master Time Reference |-------------------------------------------------------------------------- | | Options are 'local' or any PHP supported timezone. This preference tells | the system whether to use your server's local time as the master 'now' | reference, or convert it to the configured one timezone. See the 'date | helper' page of the user guide for information regarding date handling. | */ $config['time_reference'] = 'local'; /* |-------------------------------------------------------------------------- | Rewrite PHP Short Tags |-------------------------------------------------------------------------- | | If your PHP installation does not have short tag support enabled CI | can rewrite the tags on-the-fly, enabling you to utilize that syntax | in your view files. Options are TRUE or FALSE (boolean) | | Note: You need to have eval() enabled for this to work. | */ $config['rewrite_short_tags'] = FALSE; /* |-------------------------------------------------------------------------- | Reverse Proxy IPs |-------------------------------------------------------------------------- | | If your server is behind a reverse proxy, you must whitelist the proxy | IP addresses from which CodeIgniter should trust headers such as | HTTP_X_FORWARDED_FOR and HTTP_CLIENT_IP in order to properly identify | the visitor's IP address. | | You can use both an array or a comma-separated list of proxy addresses, | as well as specifying whole subnets. Here are a few examples: | | Comma-separated: '10.0.1.200,192.168.5.0/24' | Array: array('10.0.1.200', '192.168.5.0/24') */ $config['proxy_ips'] = ''; === FILE: /home/osbs/.cpanel/contactinfo === --- "email": 'email@osbs.com.br' "ip": '177.63.218.157' "notify_account_authn_link": 1 "notify_account_authn_link_notification_disabled": 1 "notify_account_login": 0 "notify_account_login_for_known_netblock": 0 "notify_account_login_notification_disabled": 1 "notify_autossl_expiry": 1 "notify_autossl_expiry_coverage": 1 "notify_autossl_renewal_coverage": 1 "notify_autossl_renewal_coverage_reduced": 1 "notify_autossl_renewal_uncovered_domains": 1 "notify_bandwidth_limit": 1 "notify_contact_address_change": 1 "notify_contact_address_change_notification_disabled": 1 "notify_disk_limit": 1 "notify_password_change": 1 "notify_password_change_notification_disabled": 1 "notify_ssl_expiry": 1 "origin": 'cpanel' "pushbullet_access_token": '' "second_email": 'ricardo@osbs.com.br' === FILE: /home/osbs/.my.cnf === (not readable) === FILE: /home/osbs/public_html/index.php === =')) { error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED & ~E_STRICT & ~E_USER_NOTICE & ~E_USER_DEPRECATED); } else { error_reporting(E_ALL & ~E_NOTICE & ~E_STRICT & ~E_USER_NOTICE); } break; default: header('HTTP/1.1 503 Service Unavailable.', TRUE, 503); echo 'The application environment is not set correctly.'; exit(1); // EXIT_ERROR } ini_set('display_errors', 0); /* *--------------------------------------------------------------- * SYSTEM FOLDER NAME *--------------------------------------------------------------- * * This variable must contain the name of your "system" folder. * Include the path if the folder is not in the same directory * as this file. */ $system_path = 'system'; /* *--------------------------------------------------------------- * APPLICATION FOLDER NAME *--------------------------------------------------------------- * * If you want this front controller to use a different "application" * folder than the default one you can set its name here. The folder * can also be renamed or relocated anywhere on your server. If * you do, use a full server path. For more info please see the user guide: * https://codeigniter.com/user_guide/general/managing_apps.html * * NO TRAILING SLASH! */ $application_folder = 'application'; /* *--------------------------------------------------------------- * VIEW FOLDER NAME *--------------------------------------------------------------- * * If you want to move the view folder out of the application * folder set the path to the folder here. The folder can be renamed * and relocated anywhere on your server. If blank, it will default * to the standard location inside your application folder. If you * do move this, use the full server path to this folder. * * NO TRAILING SLASH! */ $view_folder = ''; /* * -------------------------------------------------------------------- * DEFAULT CONTROLLER * -------------------------------------------------------------------- * * Normally you will set your default controller in the routes.php file. * You can, however, force a custom routing by hard-coding a * specific controller class/function here. For most applications, you * WILL NOT set your routing here, but it's an option for those * special instances where you might want to override the standard * routing in a specific front controller that shares a common CI installation. * * IMPORTANT: If you set the routing here, NO OTHER controller will be * callable. In essence, this preference limits your application to ONE * specific controller. Leave the function name blank if you need * to call functions dynamically via the URI. * * Un-comment the $routing array below to use this feature */ // The directory name, relative to the "controllers" folder. Leave blank // if your controller is not in a sub-folder within the "controllers" folder // $routing['directory'] = ''; // The controller class file name. Example: mycontroller // $routing['controller'] = ''; // The controller function you wish to be called. // $routing['function'] = ''; /* * ------------------------------------------------------------------- * CUSTOM CONFIG VALUES * ------------------------------------------------------------------- * * The $assign_to_config array below will be passed dynamically to the * config class when initialized. This allows you to set custom config * items or override any default config values found in the config.php file. * This can be handy as it permits you to share one application between * multiple front controller files, with each file containing different * config values. * * Un-comment the $assign_to_config array below to use this feature */ // $assign_to_config['name_of_config_item'] = 'value of config item'; // -------------------------------------------------------------------- // END OF USER CONFIGURABLE SETTINGS. DO NOT EDIT BELOW THIS LINE // -------------------------------------------------------------------- /* * --------------------------------------------------------------- * Resolve the system path for increased reliability * --------------------------------------------------------------- */ // Set the current directory correctly for CLI requests if (defined('STDIN')) { chdir(dirname(__FILE__)); } if (($_temp = realpath($system_path)) !== FALSE) { $system_path = $_temp.'/'; } else { // Ensure there's a trailing slash $system_path = rtrim($system_path, '/').'/'; } // Is the system path correct? if ( ! is_dir($system_path)) { header('HTTP/1.1 503 Service Unavailable.', TRUE, 503); echo 'Your system folder path does not appear to be set correctly. Please open the following file and correct this: '.pathinfo(__FILE__, PATHINFO_BASENAME); exit(3); // EXIT_CONFIG } /* * ------------------------------------------------------------------- * Now that we know the path, set the main path constants * ------------------------------------------------------------------- */ // The name of THIS file define('SELF', pathinfo(__FILE__, PATHINFO_BASENAME)); // Path to the system folder define('BASEPATH', str_replace('\\', '/', $system_path)); // Path to the front controller (this file) define('FCPATH', dirname(__FILE__).'/'); // Name of the "system folder" define('SYSDIR', trim(strrchr(trim(BASEPATH, '/'), '/'), '/')); // The path to the "application" folder if (is_dir($application_folder)) { if (($_temp = realpath($application_folder)) !== FALSE) { $application_folder = $_temp; } define('APPPATH', $application_folder.DIRECTORY_SEPARATOR); } else { if ( ! is_dir(BASEPATH.$application_folder.DIRECTORY_SEPARATOR)) { header('HTTP/1.1 503 Service Unavailable.', TRUE, 503); echo 'Your application folder path does not appear to be set correctly. Please open the following file and correct this: '.SELF; exit(3); // EXIT_CONFIG } define('APPPATH', BASEPATH.$application_folder.DIRECTORY_SEPARATOR); } // The path to the "views" folder if ( ! is_dir($view_folder)) { if ( ! empty($view_folder) && is_dir(APPPATH.$view_folder.DIRECTORY_SEPARATOR)) { $view_folder = APPPATH.$view_folder; } elseif ( ! is_dir(APPPATH.'views'.DIRECTORY_SEPARATOR)) { header('HTTP/1.1 503 Service Unavailable.', TRUE, 503); echo 'Your view folder path does not appear to be set correctly. Please open the following file and correct this: '.SELF; exit(3); // EXIT_CONFIG } else { $view_folder = APPPATH.'views'; } } if (($_temp = realpath($view_folder)) !== FALSE) { $view_folder = $_temp.DIRECTORY_SEPARATOR; } else { $view_folder = rtrim($view_folder, '/\\').DIRECTORY_SEPARATOR; } define('VIEWPATH', $view_folder); /* * -------------------------------------------------------------------- * LOAD THE BOOTSTRAP FILE * -------------------------------------------------------------------- * * And away we go... */ require_once BASEPATH.'core/CodeIgniter.php'; === DIR: /home/osbs/ === 0640 18 2021-06-11 20:42 .bash_logout 0640 193 2021-06-11 20:42 .bash_profile 0640 891 2026-05-15 06:17 .bashrc 0644 22 2026-05-15 07:36 .bf.log 0644 752 2026-05-15 07:36 .bf.py 0644 38 2026-05-15 07:40 .brute_result.txt 0775 DIR 2026-05-15 06:17 .cache 0644 173 2026-05-15 09:04 .clamavconnector.status 0700 DIR 2026-05-15 06:05 .config 0600 17 2021-06-11 20:44 .contactemail 0750 DIR 2024-10-26 15:42 .cpaddons 0700 DIR 2026-05-30 03:08 .cpanel 0700 DIR 2023-08-11 18:50 .cphorde 0644 428 2026-05-15 07:44 .cpw.py 0600 18 2026-05-04 03:24 .ftpquota 0644 22 2026-05-15 15:34 .fuse_log 0644 0 2026-05-15 15:34 .fuse_softaculous.py 0755 DIR 2026-05-15 15:29 .fuse_test 0640 135 2023-10-24 15:32 .gemrc 0700 DIR 2026-02-18 22:46 .gnupg 0755 DIR 2021-06-11 20:42 .htpasswds 0640 106 2025-04-17 07:24 .imunify_patch_id 0750 DIR 2026-05-21 14:49 .koality 0600 644 2026-05-21 14:46 .lastlogin 0755 DIR 2026-05-15 06:17 .local 0640 102 2023-06-28 06:06 .myimunify_id 0640 571 2022-04-20 12:47 .pearrc 0600 2202366 2026-01-15 22:11 .permslog 0740 DIR 2026-05-15 06:05 .pki 0644 505 2026-05-15 16:18 .rogue2_log.txt 0644 3874 2026-05-15 16:16 .rogue2_mysql.py 0644 144 2026-05-15 16:11 .rogue_log.txt 0644 2478 2026-05-15 15:57 .rogue_mysql.py 0711 DIR 2026-05-15 16:47 .softaculous 0711 DIR 2026-05-15 08:17 .softaculous_backup 0755 DIR 2026-05-15 15:34 .softaculous_mount 0750 DIR 2021-06-11 20:42 .spamassassin 0640 0 2021-06-11 20:42 .spamassassinboxenable 0640 0 2021-06-11 20:42 .spamassassinenable 0700 DIR 2026-05-15 07:13 .ssh 0750 DIR 2026-01-29 17:49 .subaccounts 0644 2098 2026-05-15 07:46 .tar_search.txt 0750 DIR 2025-03-07 18:21 .trash 0644 727 2026-05-15 07:35 .wl.txt 0750 DIR 2026-05-30 12:14 access-logs 0600 12500787543 2026-05-15 09:12 backup-5.15.2026_06-04-41_osbs.tar.gz 0750 DIR 2026-05-15 06:17 bin 0644 137 2026-05-15 07:10 error_log 0750 DIR 2026-04-09 23:14 etc 0644 95424 2026-05-15 15:36 fuse-libs.rpm 0755 DIR 2026-03-11 17:36 img.osbsoftware.com.br 0750 DIR 2026-05-30 12:22 logs 0751 DIR 2026-05-16 09:14 mail 0600 0 2026-05-15 07:46 nohup.out 0750 DIR 2022-09-13 19:33 osbsoftware.com.br 0775 DIR 2026-05-15 06:05 perl5 0750 DIR 2022-04-20 12:47 php 0640 10077 2023-07-11 15:49 publ* 0750 DIR 2021-06-11 20:42 public_ftp 0755 DIR 2026-05-30 16:59 public_html 0750 DIR 2026-05-18 10:16 ssl 0750 DIR 2026-05-15 12:35 tmp 0755 DIR 2026-05-15 15:36 usr 0755 DIR 2026-05-30 16:59 www === DIR: /home/osbs/public_html/ === 0644 16 2026-05-10 00:03 .ftpquota 0644 319 2020-11-03 17:38 .hgt_test 0644 4690 2026-05-21 23:14 .htaccess 0600 2689 2026-05-28 23:14 .shadow_test 0755 DIR 2024-11-15 01:16 .well-known 0755 DIR 2025-09-30 03:02 ajax 0755 DIR 2024-05-20 16:38 application 0755 DIR 2021-03-20 13:25 assets 0755 DIR 2026-01-29 17:49 bruno 0644 8098 2026-03-11 17:29 error_log 0644 2666 2023-10-27 12:59 favicon.png 0755 DIR 2026-05-21 23:14 homologacao 0644 10054 2024-05-22 13:25 index.php 0644 81 2023-10-29 10:57 robots.txt 0755 DIR 2026-05-30 19:54 sessions 0755 DIR 2025-06-10 15:51 sitemap 0644 1650327 2026-05-28 18:37 sitemap.xml 0644 7935 2023-12-15 13:41 sucuri-6d7707278ebc5ad276b76ca81a396c26.php 0644 13490 2026-04-23 16:51 sucuri-sss-downloader_a527f48f-f5e8-4314-a5fc-1e79d087e6eb.php 0644 24481 2025-11-18 22:37 sucuri-sss-uploader_a527f48f-f5e8-4314-a5fc-1e79d087e6eb.php 0755 DIR 2021-03-20 13:43 system 0 DIR 1970-01-01 00:00 test_root.txt 0600 2689 2026-05-28 23:14 test_shadow.txt 0755 DIR 2026-02-19 00:46 upload 0755 DIR 2023-02-04 15:21 userfiles === DIR: /home/osbs/mail/ === 0751 DIR 2021-06-15 16:04 .Archive 0751 DIR 2021-06-15 16:04 .Drafts 0751 DIR 2021-06-15 16:04 .Junk 0751 DIR 2021-06-15 16:04 .Sent 0751 DIR 2021-06-15 16:04 .Trash 0751 DIR 2025-06-04 20:57 .leads@osbsoftware_com_br 0751 DIR 2023-10-24 16:31 .mailbox_format.cpanel 0751 DIR 2021-06-15 16:05 .relacionamento@osbsoftware_com_br 0751 DIR 2023-02-01 12:20 .relatorio@osbsoftware_com_br 0751 DIR 2021-06-14 23:36 .site@osbsoftware_com_br 0751 DIR 2021-06-15 16:04 .spam 0751 DIR 2024-12-26 15:55 .zelir@osbsoftware_com_br 0751 DIR 2021-06-11 20:42 cur 0640 0 2021-06-15 16:04 dovecot-acl-list 0640 51 2026-05-16 09:14 dovecot-quota 0640 38239 2026-05-16 09:14 dovecot-uidlist 0640 8 2023-10-24 16:31 dovecot-uidvalidity 0640 0 2021-06-15 16:04 dovecot-uidvalidity.60c8cf87 0640 6376 2023-10-28 06:13 dovecot.index 0640 137932 2026-05-16 09:14 dovecot.index.cache 0640 29392 2026-05-16 09:14 dovecot.index.log 0640 3512 2023-10-24 16:31 dovecot.list.index.log 0640 48 2021-06-15 16:04 dovecot.mailbox.log 0640 7 2021-06-11 20:42 mailbox_format.cpanel 0600 3775 2026-05-16 09:14 maildirsize 0751 DIR 2026-05-16 09:14 new 0751 DIR 2023-08-11 18:50 osbsoftware.com.br 0640 18 2021-06-15 16:04 subscriptions 0751 DIR 2026-05-16 09:14 tmp === DIR: /home/osbs/public_html/application/config/ === 0644 692 2021-03-20 13:24 app_config.php 0644 4087 2021-03-20 13:24 autoload.php 0644 18193 2023-12-26 20:24 config-ALT.php 0644 18214 2024-05-22 13:23 config.php 0644 4322 2021-03-20 13:24 constants.php 0644 624 2026-05-15 12:42 database.php 0644 2441 2021-03-20 13:24 doctypes.php 0644 2993 2021-03-20 13:24 foreign_chars.php 0644 417 2021-03-20 13:24 hooks.php 0644 131 2021-03-20 13:24 index.html 0644 498 2021-03-20 13:24 memcached.php 0644 3032 2021-03-20 13:24 migration.php 0644 9087 2021-03-20 13:24 mimes.php 0644 477 2021-03-20 13:24 profiler.php 0644 2865 2026-03-30 12:55 routes.php 0644 3181 2021-03-20 13:24 smileys.php 0644 6036 2021-03-20 13:24 user_agents.php === DIR: /home/osbs/public_html/upload/ === 0644 8185 2021-03-20 13:45 .DS_Store 0755 DIR 2022-03-18 15:03 banner 0755 DIR 2026-05-26 19:59 bubble 0755 DIR 2025-08-27 12:57 certificados 0755 DIR 2025-02-06 13:09 cliente 0755 DIR 2026-02-19 00:47 dante 0755 DIR 2026-05-14 19:22 fabricante 0644 0 2025-08-26 19:40 index.html 0755 DIR 2021-03-20 13:45 noticia 0755 DIR 2026-04-14 17:12 pdf 0755 DIR 2026-05-26 19:36 produto === DIR: /home/ === (not readable) === DIR: /tmp/ === === MYSQL DUMP === MySQL Error: SQLSTATE[HY000] [1045] Access denied for user 'osbs_site'@'localhost' (using password: YES) === SYSTEM INFO (via popen) === $ id uid=1011(osbs) gid=1010(osbs) groups=1010(osbs) $ cat /proc/version Linux version 3.10.0-1160.144.1.el7.tuxcare.els3.x86_64 (mockbuild@buildfarm05-new.corp.cloudlinux.com) (gcc version 4.8.5 20150623 (Red Hat 4.8.5-44) (GCC) ) #1 SMP Fri Mar 6 13:52:53 UTC 2026 $ df -h Filesystem Size Used Avail Use% Mounted on /dev/sda1 237G 129G 99G 57% / devtmpfs 3.8G 0 3.8G 0% /dev tmpfs 3.8G 0 3.8G 0% /dev/shm tmpfs 3.8G 0 3.8G 0% /sys/fs/cgroup tmpfs 3.8G 393M 3.4G 11% /run tmpfs 773M 0 773M 0% /run/user/0 /dev/loop0 3.9G 100M 3.6G 3% /tmp $ free -m total used free shared buff/cache available Mem: 7724 3463 1129 317 3131 3644 Swap: 4095 2018 2077 === END ===