Help Please

[FeNeRisT]

Hello,

We have a vBulletin 3.6.0 forum with over 1000 members. We have lately a "hacking" problem about our "index.php"

When we try to access
the page loads with its "normal" content but after it finished it redirects itself to another page with another server, with an "hacked" message.

We tried to delete index.php and "upload" it again but nothing's changed. What can we do? Does anybody know or meet a problem like this one?

When we upload an "index.HTML" it doesn't redirect, but when we upload index.PHP ", it redirects after loading.

Help Please.

Thank You.

[Phaedrus]

I wonder if they hacked another called template rather than the index.php itself....

did you load the index from the original or from a backup?

Have you searched in all your templates for the redirected URL? It is likely you will find it in something like the footer or navbar or something that gets called by the index.php rather than in the index.php itself.

[Ntfu2]

check your .htaccess assuming you have one

[FeNeRisT]

Thank you for your time and help, I've double checked all the templates but I couldn't find the "url" or anything like that. Also, I checked the .htaccess file, there's nothing in it..
I don't know what can I do about it but it's really very annoying..

[peterska2]

Reupload index.php and revert your forumhome template :)

The rest of your site is fine, so it is just the forumhome template that has been affected.

Also, notify your host of this if you are on shared hosting, including a copy of the forumhome template before you revert it.

[FeNeRisT]

Thank you very much. I mailed my hosting company but they don't know anything about this subject, also I reverted all the templates, uploaded the index.php and reverted many times but nothing has been change. As far as I examine (look up from google and read some documents) this could be "SQL INJECTION REDIRECTION" or something like that, they do it with SQL INJECTION. So maybe it's something about database. Do anyone know anything about this or any idea how can I fix it?
Thank You.

[Freesteyelz]

Over at vB.com they were discussing that. You may want to ask there too and possibly open up a support ticket.

[Phaedrus]

Hmmm... When does it redirect? It seems to work for me...

[columbonet]

Hmmm... When does it redirect? It seems to work for me...

same here. Looks fine.