FORUMHOME hacked

[djheart]

Hey,

I got my FORUMHOME templated hacked and edited to redirect people to another site written in it "this site is hacked by blah"

ps: HTML is disabled & all redirect codes already added to the banned words list.

What shall i do? this is the 3rd time it get hacked in the same week, in each time i solve it by removing the style and re upload it again..
My version is the latest. 3.6.8 patch 2

any ideas?

[SEOvB]

You need to find out how they are hacking you.

Are you running the latest version of vBulletin? What modifications are you using? Are you on a shared or dedicated host?

[djheart]

I already mentioned the vb version.. its the latest..

And the hacks:

File Uploader (limited to only members and they can only upload pics, else is disabled)
Online members within last 24hrs.
Last threads marquee
Limited guest viewing
Forum stats (on footer)

[Paul M]

Which mod exactly is "Forum Stats on footer" ?

[valdet]

I already mentioned the vb version.. its the latest..

And the hacks:

File Uploader (limited to only members and they can only upload pics, else is disabled)
Online members within last 24hrs.
Last threads marquee
Limited guest viewing
Forum stats (on footer)

Does your File uploader checks for proper file extension? Cause many times hackers would add a .jpg extension to their their malicious files i.e. evil.php.jpg

Try to disable all those mods and see if problem occurs again.
Regards.
Val

[alexgeek]

Can you link me to the site? I'll see what type of redirect is happening.