PDA

View Full Version : Forum hacked


lazor
07-24-2009, 06:42 AM
Ok, so my 3.8.2 Vbulletin forum was hacked and now whenever you view the forum home it redirects to a shock site. I updated to 3.8.3 hoping that would fix the problem, but it didn't. It doesn't matter what style I use, either.
Products(all are disabled right now):
Cyb - Advanced Forum Rules 3.9.2
Cyb - Login To User Account 2.2
Cyb - PayPal Donate 4.8.2
DownloadsII 5.1.0
Social Groups on Forumhome 1.3.1 T
emplate Modification System 1.1.5
vB Ad Management 5.02
v vBadvanced CMPS 3.2.1
vBExperience 3.8.2
[AJAX] Tabbed Personal Statistics (YUI) 1.5

toonysnn
07-24-2009, 06:50 AM
You've probably got a .htaccess rule in place. (Well not you, but you know what I mean)

lazor
07-24-2009, 06:52 AM
It's not .htaccess
It takes a couple seconds to redirect, and it only happens on the forum home.

toonysnn
07-24-2009, 06:57 AM
To debug this, in config.php add under <?php
define("DISABLE_HOOKS", true);

If this fixes the problem, remove this and disable your plugins one by one to find the security flaw.

If it is yet to be fixed, you'll need to do a check on the plugins created under the product, "vBulletin." Sometimes some users' will try to create a plugin here.

Check the template "FORUMHOME" as well.

notrious
07-24-2009, 07:16 AM
Revert your forum home templates ....

lazor
07-24-2009, 07:25 AM
Problem solved. It was a jvascript injection, had to create some replacement variables.