1. Go to the classic version of your Rediffmail account. This is important else you will get an error “You have not specified any email address to which you would like your emails forwarded “ You can do this from the new version by clicking "Back to Classic" on the top right corner of the webpage.
2. The browser location will look like http://f1mail.rediff.com/prism/maillist". Replace maillist with forwardyourmails?action=forwardmails&email=YOUR_EMAIL_ADDRESS&leavecopy=1
3. Enter the email ID that you want to forward your Rediffmail email to and you are done!

I am a part time moderator/web administrator on our unofficial college website. Last year our website had been hacked and some malicious script had been placed on it which was causing redirection of some Google referred traffic. It would not resend all Google referred traffic though, it even placed its own cookie in the malicious script to ensure that people are not sent to the offending site every time but only once every 86400 seconds.

For days I searched the internet desperately to find out if it was a known thing, most sites suggested it was a .htaccess attack, but I had already suspected that and our .htaccess file was squeaky clean. Just to be sure I also checked all the .htaccess files above and below out root level and they were clean. So I was sure it was a script. If your site is hacked via the .htaccess method, there would be entries like :

RewriteEngine On
RewriteCond %{HTTP_REFERER} .*google.*$ [NC,OR]
RewriteCond %{HTTP_REFERER} .*aol.*$ [NC,OR]
RewriteCond %{HTTP_REFERER} .*msn.*$ [NC,OR]
RewriteCond %{HTTP_REFERER} .*altavista.*$ [NC,OR]
RewriteCond %{HTTP_REFERER} .*ask.*$ [NC,OR]
RewriteCond %{HTTP_REFERER} .*yahoo.*$ [NC]
RewriteRule .* http://newaddress [R,L]

After the .htaccess files were found clean, I tried some workarounds to prevent the redirection, like setting server referrer variable to null and trying to make all URLs 301 redirects but that didn’t work since the script was still able to detect the referrer as Google and redirect the website to tinyurl4.info which probably paid them a lot to get this done. It would be sent to random addresses on the tinyurl4.info site. Since the site may be hosting malware, I would request you not to go there. So this method of cloaking the referrer at my side clearly wasn’t working.

Next I created a zip file from the offending folder of the site and downloaded the whole thing using my 3G connection photon+ connection (wanted to finish it off ASAP). Once the folder was downloaded, I ran a McAfee scan of the whole thing hoping that the anti virus would be able to detect the offending code as it would be obfuscated. But I was wrong McAfee was terribly incompetent. So it was plan B , I started searching for strings like .js and tinyurl4.info to try and find the redirecting code. Windows search wasn’t very helpful here and couldn’t even find base64 which was one of the strings I searched for and was a part of the offending code.

So now it was plan C , this one worked. I listed all files in the site which had been modified within the past one year. Here is where I was able to find the culprit. One PHP file global_lang.php  had been edited in 2009 while all its peers were not listed. I grew suspicious and opened the file. To my shock, horror and relief I found the following piece of code :

which when translated turned out to be malicious code. I am not displaying the malicious code here should you get any ideas. What it was doing was checking if the person was referred by Google, Yahoo etc. and if that was true and there existed no cookie it would redirect that person after setting a cookie. The cookie ensured that once a person was redirected to the fake site, he wouldn’t be redirected for some time.

I have listed these steps here so that webmasters might be able to get a hint of how to recover from this particular type of  injection on their sites. Ofcourse, always take backups, backups ensure you can just dump them on and the malicious code is removed.

Future Proofing

There is probably no way to protect yourself from the super hackers , however you can always take precautions. First and foremost, always take backups and multiple backups. you should ideally have 12 backups from the past 12 months.

Apart from backups, ensure that the permissions on your website are always set correctly. 777 is really the devil .Never grant write permissions to outside users. 755 for folders and 644 for .php files usually works. Incase you suspect hacking, contact your host at the earliest.

Also turn off all directory listing.

Hoping you found this article helpful

After moving to Bluehost, I experienced downtime the very 2nd day, pretty significant, I got in touch with the Bluehost live chat support (pretty useless most times) who told me (in different words) , This is shared hosting, we cant do anything about downtimes or server issues, please take your issues elsewhere and switch to VPS. I very honestly asked the support person that I am bringing downtime to his notice and he is asking me to shift, suddenly he became soft and told me I had the choice to switch to another host but they wont take care of errant sites on server and neither will they assure me that downtimes would be reduced. It was like downtimes are Ok.

Anyway I kept on with Bluehost as it was overall reliable, then came the next blow : CPU throttling. Its every blog owners nightmare. PHP scripts would routinely be timed out and every time a wordpress page would load, my account would be throttled to ensure their grossly oversold servers are ok. I tried everything, using super cache, cleaning databases, removing overheads etc. But none of these helped. In an experiment, I myself would access a cached age of my account and still find that on each pageload my account is throttled. Page source would confirm a cached page was served. I own small sized blogs and such throttling out was giving me nightmares.

I don’t care what Bluehost tells you but CPU throttling is a deal breaker for me, the site would become excruciatingly slow during access.

Then began the search for the new Cpanel host. Stablehost was suggested by my brother as it had an offer offering 75% lifetime recurring discount. Interesting i said but warned him that if its too good to be true, it sometimes is. So I started to find bad reviews about Stablehost but surprisingly there was no bad review of Stablehost on the Internet, only people praising their personal customer support. I was impressed and those who know me know that customer service should be really good to impress me .

So I have signed up for Stablehost and its been more than a week and haven’t faced a single issue yet, all websites were transferred to the new account and things seem to be running smoothly. However I hope I don’t have to eat my own words. The reason I switched was that unlike other hosts, I can take a 6 month contract, yearly contract etc. for the same rate so switching is easy.

The customer care has been prompt and smooth, maximum time taken to respond was 12 hours for a domain transfer request to be initiated, otherwise I would get a reply within 10 minutes. Such a nice standard of personal customer service is a refreshing change from the robotic customer care of Bluehost who would routinely ask me to cancel my account in case of any downtime and never once reimbursed me for downtime.

Stablehost still has a 50% off coupon running on their website (use BDAY or TOS, both work) and if you are looking for a good, friendly host that offers realistic hosting, please have a look at Stablehost. The 5 GB space 100GB bandwidth plan would barely cost you $36 for the year after the discount. That’s much cheaper than bluehost and other hosts and they dont grossly oversell like Bluehost.

UPDATE: We have used StableHost for about 2 years now. Sadly, as the company has grown bigger, so has its indifference towards users and attitude towards its customers. The shortcoming of Stablehost is that they now recommend their shared hosting only if you have a low traffic site which would require at most 2-3 PHP scripts running a second. They recently implemented a policy (without notice to their existing customers) about restricting maximum (not average) running processes to 10 (down from 20). If your site is just serving static pages, they might be useful but for anything more complex than a low traffic WordPress blog, their admin advises you to look elsewhere.

P.S. : These are affiliate links, but the review is 100% original and not sponsored.

I pity all of you who dont know about GPS and Geotagging photos. I have been hooked ever since i discovered it. I use the Locr utility in my windows mobile cellphone (also works in Symbian phones). Your phone must have GPS or you must have a Bluetooth GPS receiver.

That way, the photos you take will be implanted with GPS co-ordinates of the location you took the photos at. Its accurate to about 50 metres or so. See the dot highlighted in the photo above, it should have been in the bottom right building. So it essentially means if someone wants to nuke the NSIT COE block using GPS, he/she will hit the library instead

This way when you share photos, you can share the photos using a map with your friends and family. That way they will be able to see where the photos were taken.

Locr is an amazing software. I first discovered it in my father’s Nokia E71 (review soon). Anyway, i installed it on my Asus P320′s windows mobile, thank god the version worked on my phone also even though it was meant for windows mobile 5 and my phone has windows mobile 6.1.

So it has versions for both windows mobile and symbian, so far so good. So the long and short of it. The software allows you to easily embed the information about the GPS coordinates of the location you took your photo. This info is easily recognised by Flickr and Zooomr. So you can actually see the photos you took on a map (and trust me it looks awesome).

Currently i have taken only photos at my house, so i cant show you the feature for privacy’s sake. So i will show you the photos in locations when i go out. Your phone must have GPS for this feature.

Both scenarios were something which i would never have approved of. Anyway so i Googled. I got 10s of solutions but most didnt work. Only 1 worked and i will put it here hoping that Google dear will catch it and people who face this problem installing the Realtek HD Audio 0xE000027.

1. First Step is to make sure all instances Realtek Audio and its associative softwares are uninstalled from add remove programs and device manager. This includes Intel High Definition audio.
2. On your PC change the CSDVersion registry key to Windows XP SP2:
   HKLM\SYSTEM\CurrentControlSet\Control\Windows\CSDVersion value=200

This problem arises as the patch thinks that SP3 includes a better version of the patch itself and hence doesn’t install itself.

3. Download the latest drivers from the Intel website, navigate to the KB888111 patch.

4. But before installing the patch, goto your device manager and disable the UAA. Now uninstall the UAA.

5. Install your patch now.

6. Install the Realtek drivers now and things should work.

7. Change the SP version to 300 again.

If it didnt work, try once again. I can enjoy 7.1 channel high definition sound from my Intel Original motherboard now. Realtek HD Audio now works fine. Hopefully Error 0xE000027 is fixed now.

If this helped solve your problem, consider making a small donation($1 even ) via paypal button below towards the maintenance of this website (hosting + domain name). All proceeds will be directly spent on bringing you more such helpful posts.

Disclaimer : Advice on as is basis, this worked for me, may or may not work for you, but it should

1. How to receive incoming files via bluetooth , most windows mobile users find that by default the incoming file feature is disabled in Windows Mobile phones.

2. How to ensure that files received via bluetooth are saved directly onto your memory card. Most smartphones and Pocket PCs have limited internal memory, often just enough to support the default Windows Mobile installation.

The straight answer is a software called Obex Inbox (3rd party software, research before use). Install the software and reboot your Windows Mobile phone.

Now goto settings on your Windows Mobile phone and Just give the path as Storage Card/folder in your Obex settings and all incoming bluetooth beams will be stored in your storage card.

For more Windows Mobile tips and tricks keep watching the blog . The screenshots are taken on the Asus P320 smartphone with Windows Mobile 6.1 Professional.

These are the steps needed to setup your windows mobile device to receive photos/music/data files:

Step 1: In Settings click on Bluetooth, select the mode tab and switch on bluetooth and make this device visible to other devices.

Step 2: In Settings , click on Beam and check receive all incoming beams.

After you complete these 2 steps all of your bluetooth incoming beams should reach your mobile phone and you should be able to share photos, files and music with your friends and receive it from them.

But another problem, all incoming files are stored in my documents, how do you ensure that these are stored in storage card ? Answer to that next week

I mean, am i cooler if i pay 1 rupee to Airtel for each message i send. So, when you are at home, save some money and use free SMS services to send SMSes to friends. It works with almost all Indian operators and is free, what have you got to lose ? I use the service by Mginger.

Also you do get the option to receive ads and be paid for the same, again the money there aint great but occasionally you get discount coupons which have to be shown in shops on your cell screen, although i must confess i have never tried them.

So sign up here to start sending free SMSes