Originally Posted by flypaper (Post 1190606)

^You people (or your host) are doing something wrong. It isn't the hack...

Originally Posted by oatsy (Post 1190978)

Had a 3.6.4 forum hacked (as in Turkish hackers, not as in a deliberate VB mod) a couple of days ago with a hack called cmdhack, and there are some signs that it came in through a previous version of Image Hosting - version 1.3.1. I was looking here to see what the most current version is. I see 1.3.1 is outdated but I'm not sure if the recent updates change anything about security (if indeed Image Hosting was the way they got in.

The reason I think Image Hosting may have been the route in is because there were 3 new files appeared in the 'imagehosting' directory at about the time the site was hacked. There should only be image files and an index.html (with nothing in it) in there, but we had a new index file plus 2 php files. Couldn't open any of them by ftp for editing - access denied. We were able to delete the folder and replace it with a backup and the forums are up and running again now once we fixed the problem in the db - see below.

I'm still puzzled about how those files got there though. The Image Hosting feature is set to a) only accept jpg, gif, png, and bmp files. I've tried txt files etc and it won't accept them. b) only trusted members of the forum are enabled on the Image Hosting system - general public don't have permissions. All forums have HTML disabled.

I've disabled the Image Hosting hack from all users for now. I'd appreciate any thoughts on how this might have happened. Can a script be disguised as an image file? Could one of the trusted members have innocently uploaded what he thought was a clean image file but was actually the hacker's script?

I'd like to keep Image Hosting on the site because it's a terrific hack.

What happens with this cmdhack is that as soon as the forums try to load you get redirected straight to a page on the hackers site ('Turkish Hackers blah blah' rubbish).

If you do get caught with it, it's easy to get rid off as long as you have access to phpmyadmin:

Long story short ... the hack changed a couple of fields in the top level publicly accessible forum (the Category in other words). The Title field text was replaced with a refresh command and the description field had the URL details to the hackers page. As soon as the forums load the refresh/redirect command kicks you to the hackers URL after a second or two.

No new pages were added to the site - the 'You've been hacked' page was on the hackers remote site. Easy enough to fix by going into phpmyadmin, listing the 'forum' table and look for the forum that has the wrong info in it. Replace the hackers text with the correct text and off you go. You can't edit it in the admin cp because as soon as you try to list the forums in Forum Manager the redirect kicks in again.

Thanks

Originally Posted by digital3 (Post 1192723)

The funny part is that hackers don't even have to check to see who has what mods installed. LOL They just come here, look in these threads and then hammer us :).

Originally Posted by Been Told (Post 1192741)

But I'm unsure about installing this - maybe the developer can make a statement in regards to what oatsy said? That'd make my decision easier.

Originally Posted by OffRoadManiac (Post 1194473)

will this work with 3.6.5?

Originally Posted by aacircle (Post 1199177)

When I upload a png the background turns black. It's done this to me before and I thought that I just needed to redo the render I've redone it 4 times and it still does the black background. The render went perfectly into the photopost gallery but yet still gave me problems when I tried to use imagehost.

Is there a fix for this bug?

Thank you.

Originally Posted by Distance (Post 1198207)

Hey i installed this but its not watermarking the images when it has a . in the text

Also when i delete the images from the image host it doesnt delete them from the ftp??

Distance

Originally Posted by aacircle (Post 1199209)

If you use imagehost, would you be able to confirm if you have this same problem by uploading a .png file?

Thanks.

Originally Posted by Ranma2k (Post 1200061)

Hi everyone .
I'm sorry i was away lately but i really had big issues in real life concerning work/ financial things

now with everything is back to normal I'm going to continue working on it ..
i have setup a test env for the software and currently I'm working on having all the issues resolved

So in order to set the goal for the new ver ( 2.0) it should have :

1- Multiple storing system ( Local host / remote host ) can only use one !
2- Add-on En/Disabling system
3- Comment/rating system
4- Personal Folders ( ability for each user to create folders )
5- fixing the issues with the current versions.

If anyone have any addition to this list please Write it in a well documented way including the reason and they way he want it . so it would be easy for all of us to understand.

Thanks all

Originally Posted by Merjawy (Post 1199348)

works fine here.. I have my domain xxxxxxxx.com as my text watermark and it puts it on just like it is

and deleting image, will delete file from directory

Originally Posted by Distance (Post 1200166)

It doesnt watermark bmp's or animated gifs by the looks of it

Originally Posted by Distance (Post 1200421)

Also i get this error when uploading pngs..



Warning: imagepng() [function.imagepng]: gd-png: fatal libpng error: zlib error in /includes/vbimghost_include.php on line 204

Warning: imagepng() [function.imagepng]: gd-png error: setjmp returns error condition in /includes/vbimghost_include.php on line 204

Originally Posted by Distance (Post 1201132)

/home/user/public_html


You need to change user with your user

Or change it to your own custom path..




I have 2.0.28 installed

Distance