Everything From MongoDB Deleted Automatically No Idea How my User Base was 5000 Please Help

[HemanParbhakar]

Please read the following instructions carefully.

Check out #1271 for an ideal bug report.
The closer your issue report is to that one, the more likely we are to be able to help, and the more likely we will be to fix the issue quickly!

Many members of the community use Stack Overflow and Server Fault to ask questions.
Read through the existing questions or ask your own!

• Stack Overflow: http://stackoverflow.com/questions/tagged/parse.com
• Server Fault: https://serverfault.com/tags/parse

For database migration help, please file a bug report at https://parse.com/help#report

Make sure these boxes are checked before submitting your issue -- thanks for reporting issues back to Parse Server!

• You've met the prerequisites: https://github.com/ParsePlatform/parse-server/wiki/Parse-Server-Guide#prerequisites.

• You're running the latest version of Parse Server: https://github.com/ParsePlatform/parse-server/releases

• You've searched through existing issues: https://github.com/ParsePlatform/Parse-Server/issues?utf8=%E2%9C%93&q=is%3Aissue Chances are that your issue has been reported or resolved before.

• You have filled out every section below. Issues without sufficient information are more likely to be closed.

--

Issue Description

[DELETE EVERYTHING ABOVE THIS LINE BEFORE SUBMITTING YOUR ISSUE]

Describe your issue in as much detail as possible.

[FILL THIS OUT]

Steps to reproduce

Please include a detailed list of steps that reproduce the issue. Include curl commands when applicable.

1. [FILL THIS OUT]
2. [FILL THIS OUT]
3. [FILL THIS OUT]

Expected Results

[FILL THIS OUT]

Actual Outcome

[FILL THIS OUT]

Environment Setup

• Server

  • parse-server version (Be specific! Don't say 'latest'.) : [FILL THIS OUT]
  • Operating System: [FILL THIS OUT]
  • Hardware: [FILL THIS OUT]
  • Localhost or remote server? (AWS, Heroku, Azure, Digital Ocean, etc): [FILL THIS OUT]

• Database

  • MongoDB version: [FILL THIS OUT]
  • Storage engine: [FILL THIS OUT]
  • Hardware: [FILL THIS OUT]
  • Localhost or remote server? (AWS, mLab, ObjectRocket, Digital Ocean, etc): [FILL THIS OUT]

Logs/Trace

You can turn on additional logging by configuring VERBOSE=1 in your environment.

[FILL THIS OUT]

[skinp]

@Heman6886 please provide a detailed report of your issue. We can't help without the details that were asked...

[HemanParbhakar]

Sir yesterday my database was fine but today i checked my database is empty as i did the parse dashboard live it shows nothing only 5 -6 users that are being showing

[skinp]

what does mongo says if you log in using the shell? what version of Parse Server? where is your DB hosted? you're still not providing the information we need to help you figure out what's going on...

…

On Fri, Jan 6, 2017 at 10:57 AM, Heman6886 ***@***.***> wrote: Sir yesterday my database was fine but today i checked my database is empty as i did the parse dashboard live it shows nothing only 5 -6 users that are being showing — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#3330 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AArs2NIy5TtO0tc9f0Ht5FoTt0qrx7SEks5rPmRsgaJpZM4LczoT> .

[HemanParbhakar]

Authenication Fail
In my Server it is hosted
And Please tell How Can I Check Parse-server verion

[HemanParbhakar]

version is 1.4.0

[skinp]

@Heman6886 so 3 things:

1. you can't authenticate to your DB host? of course the dashboard won't be able to as well if it doesn't have the right auth credentials
2. you're running a pretty old version. stable is 2.3 now I think
3. you still haven't filed the bug correctly, we won't be able to help you further with this until you do so...

Really if you can't connect to your DB server, THAT is the problem...

I'm closing for now as the root cause seems to be your Mongo DB and this bug report is incomplete...

[flovilmart]

Maybe: http://arstechnica.com/security/2017/01/more-than-10000-online-databases-taken-hostage-by-ransomware-attackers/

[HemanParbhakar]

Sir You Are Right My Database Has Been Hacked . Can I get The copy of my databse that is being stored upon the parse offical server

[flovilmart]

You should reach out to parse.com/help but there is no guarantee there is any copy left from the database before migration after you migrated your database. @skinp?

[HemanParbhakar]

I have Tried There but there is no email address to mail the issue to so is there any way left

[skinp]

@Heman6886 unfortunately we don't keep backups on Hosted Parse after you move off to your own Parse Server. You're responsible for your own backups, which hopefully you've been taking care of.

[HemanParbhakar]

But sir please help users to make changes so that the port of mongodb Can be changed as mongodb using port 27017 are getting hacked so please

[flovilmart]

Did you had password/user to login to the database? Did you use SSL?

See:
https://docs.mongodb.com/manual/security/

https://docs.mongodb.com/manual/administration/security-checklist/

[HemanParbhakar]

Yes sir everything was added user password and login SSL too

[skinp]

@Heman6886 there's nothing wrong about running Mongo on port 27017... plus Parse Server (and Mongo) allows you to have your Mongo listen on any other port you want. Even if you ran Mongo on another port, as long as it's unprotected (no auth, SSL, network ACLs...) and you don't follow best practices, you're at risk of being hacked. Responsibility for securing Mongo and Parse Server is yours. We recommend using a provider like mLab or others if you're not used to running your own online services.

[HemanParbhakar]

No sir mongodb are getting hacked which are running on port 27017

[flovilmart]

Yeah, they are a target, as they're running on a default port, anyhow, if that's really the case, your mongodb was protected as recommended in the security checklist, you should probably report to mongodb instead of here.

[HemanParbhakar]

OK sir thanks and can u please tell me the query to update my parse server and parse dashboard

[flovilmart]

Not sure what you mean. We're running mongodb on the default port, have replica sets and backup in place in order to prevent such disasters.

[HemanParbhakar]

How can I update my parse server and parse dashboard

[flovilmart]

It all depends.but usually npm update should update all packages to the latest version

[HemanParbhakar]

Do I have to stop parse server before updating it

[skinp]

One thought I had about the data, maybe the hackers didn't drop the oplog? If it's the case, you might be able to get some data back. Have a look in local.oplog.rs...
Even if the oplog hasn't been cleared, it won't be easy to recover from it (it's pretty technical and I can't help with that) but at least it's something that might be useful...

[HemanParbhakar]

OK thnxx I will work on it and check

[yorkwang]

My mongodb database are deleted too, about 20000 users.

[Ajay125]

They delete my db too, may be it was accident. but its true I have delete logs, it done by single connection. I never seen once setup got over, assuming everything going smoth, but today i was trying setup notification too but unable to connect my db server var directory was full with error logs, i have back up till affected date but lost middle user data.

2017-01-08T01:15:46.953+0530 [conn268594] command local.$cmd command: dropDatabase { dropDatabase: 1.0 } keyUpdates:0 numYields:0 locks(micros) W:639541 reslen:56 641ms
2017-01-08T01:15:47.805+0530 [conn268594] dropDatabase princess_and_dragons starting
2017-01-08T01:15:48.016+0530 [conn268594] removeJournalFiles
2017-01-08T01:15:48.160+0530 [conn268594] dropDatabase princess_and_dragons finished
2017-01-08T01:15:48.181+0530 [conn268594] local.oplog.$main Assertion failure localOplogMainCollection src/mongo/db/repl/oplog.cpp 327
2017-01-08T01:15:48.295+0530 [conn268594] local.oplog.$main 0x121df81 0x11bd689 0x11a1bf4 0xe710be 0xe6afcd 0xa35775 0xa36c37 0xd7561d 0xbb4562 0xbb5ae0 0x774658 0x11d18db 0x3ff9607aa1 0x3ff92e8aad
2017-01-08T01:15:48.302+0530 [conn268594] SEVERE: Fatal DBException in logOp(): 0 assertion src/mongo/db/repl/oplog.cpp:327
2017-01-08T01:15:48.327+0530 [conn268594] SEVERE: terminate() called, printing stack (if implemented for platform):

[sahith29s]

gosh lost all the databases in mongodb. Is there any chance of getting all the lost data back?