Hack installed. Board Screwed up?

[talon3dhq]

Problem: Users, including myself, are having a problem viewing the Main Forums Page on my site. It keeps refreshing itself constantly. If you are logged out, the site is fine, but when you log in, it is not. My problem started when I uploaded a new avatar. Before that it was fine. I thought the problem was specific to me alone, but another user just told me they are having the same problem now.

The hack that was recently installed, Is called the My VB Pad hack, and is found here (http://www.vbulletin.com/forum/showthread.php?s=&threadid=29760). I installed this last night, and had no problems that I can think of. and this didn't start till almost 12 hours later. I really have no idea what is wrong, or if this hack is even the problem. Could someone who knows VB pretty well take a look at this hack and maybe see what file/template/etc could cause this to happen?

I deleted my own account, and recreated it, and so far, that seems to have solved it, but I am not sure if this is permanent, and I don't want to have to do this to other users.

Thanks in advance for the help.

Talon

[Admin]

I really doubt it that the hack is the problem.
It has nothing to do with the index.php file or forumhome template, or anything even close to that.

[talon3dhq]

Sorry Firefly, I know this is your hack, I was not trying to say it was the hacks fault. But, to get the most help possible, it is best for me to let people know of changes made lately, and this was the only one made. I install hacks rarely, maybe once a month, if that, and it just seems odd that everything was fine. Don't take it personally Firefly, the hack is kick ass, I am just new to this and want to make sure I give enough info for people to help me.

Talon

[amykhar]

Did you change any meta tags?

Amy

[talon3dhq]

Not that I am aware of... would this be done in one of the templates? Or in one of the php files? Sorry for asking dumb questions.

The hack is really the only thing that has changed. in the last 24 hours that I can think of.

Talon

[Admin]

[QUOTE]Originally posted by Talon3DHQ
Sorry Firefly, I know this is your hack, I was not trying to say it was the hacks fault. But, to get the most help possible, it is best for me to let people know of changes made lately, and this was the only one made. I install hacks rarely, maybe once a month, if that, and it just seems odd that everything was fine. Don't take it personally Firefly, the hack is kick ass, I am just new to this and want to make sure I give enough info for people to help me.

[talon3dhq]

Ok, I think I found at least one common thread here. The problem started right after I changed my avatar this morning. The same thing happened to this other user. When we change our avatars, the "refreshing main page" problem starts. The entire board works, except the main page. I have know idea what the heck is going on here...HELP!
Also, here is what my "Forumhome_autorefresh" template says"
<meta http-equiv="Refresh" content="$refreshtime; URL=index.php?s=$session[sessionhash]">


Talon

[Admin]

That's probably it.

Why is that template there?
And where is it being eval()ed in index.php?

[talon3dhq]

I have no idea why that template is there. Here is the attachment for the htm source. As for the index.php, I have no idea where the reference is, because I am at work and do not have access to my server right now.

Talon

[talon3dhq]

Ok, I moved that template out of the "default" templates, and into the custome templates are for the time being, to see if that fixed it, and I think it has.

I am not sure what created this, but I am checking it now to see.

Talon

[Admin]

Until you get access to index.php, empty that template (or delete it if it's custom).

[talon3dhq]

ok, I will...
Is possible that my site was hacked? I am just curious because I really have no idea how this template was created or why..

Talon

[Admin]

Do you have another admin that might have done this?

[talon3dhq]

There are 4 admins on my site. Only two of us know how to use the control panel. Yes, it is possible that one of the others might have, but one I know personally, and the other is pretty much computer illiterate!

I have recently, however, released an admin from my site because we had personal issues. He is still a member, but no admin/mod status at all. I have checked all my members, and if he has another account, he is not using the same IP or email or anything. He may have set this up before hand, but I see nothing in the admin logs that would indicate that. He is clever, but I am not sure he is that clever. Clever enough to set up a template that would only "go off" if a user changed their avatar? I really don't know. I am watching the logs, however, and I have changed and assigned new passwords for my admins.
Talon

[talon3dhq]

Just to let you know, moving the template out of the default group seems to have corrected this problem.