vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB4 Programming Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=252)
-   -   Need Help about hacking (https://vborg.vbsupport.ru/showthread.php?t=323056)

tanzeelniazi 07-20-2016 06:21 AM

Quote:

Originally Posted by z3r0 (Post 2573439)
From the admincp go to plugin manager in the left column then check for a product titled "vbulletin" that has the hook location "init_startup", click edit and if in contains the word base64 and a load of random text then you need to disable it.

In Product Vbulletin i have no init_startup
https://vborg.vbsupport.ru/external/2016/07/7.png
@RichiBoy67'
Already disable Forumrunner can i delete all forumrunner files ?
https://vborg.vbsupport.ru/external/2016/07/8.png

--------------- Added [DATE]1469003640[/DATE] at [TIME]1469003640[/TIME] ---------------

Superman, i really dont know what you say because you write so many words and my english is not good and i am little confuse please give me the perfect idea :(
Can i delete forumrunner files ? or install the patch because i dont want to upgrade my VB version at this time i have 4.2.0 and many addons working fine, if i update my VB after some addons are not working so need a help for my confusion

socialteenz 07-20-2016 08:14 AM

@tanzeelniazi

Yes, you can go ahead & delete forumrunner directory. You won't break any add on by upgrading to 4.2.0 to the latest. Make sure your on php5.4.0 or greater.

Always have a backup before upgrading.

tanzeelniazi 07-20-2016 09:35 AM

I see some addons are not update for 4.2.2 etc so i can not upgrade my VB.
If i remove forumrunner directory after my problem will be solved ?

--------------- Added [DATE]1469016443[/DATE] at [TIME]1469016443[/TIME] ---------------

Now delete forumrunner dir
Now i safe ?

Paul M 07-20-2016 11:54 AM

Quote:

Originally Posted by tanzeelniazi (Post 2573481)
Now delete forumrunner dir
Now i safe ?

Safe ? From that specific FR issue, yes.
However, since you are running vB 4.2.0, you are not safe, it has other security holes, patched in later versions.

RichieBoy67 07-20-2016 01:02 PM

You need to upgrade and if they added a plug in or injected any debase64 code into your files you still have an issue..

tanzeelniazi 07-22-2016 04:26 AM

my forum is safe from other methods but now i get 1 more error
yesterday i delete forumrunner directory but today 1 more error is coming

Code:

Database error in vBulletin 4.2.0:

Invalid SQL:

                SELECT post.postid, post.threadid, post.visible, post.title, post.userid,
                        thread.forumid, thread.title AS thread_title, thread.postuserid, thread.visible AS thread_visible, thread.firstpostid
                FROM post AS post
                LEFT JOIN thread AS thread USING (threadid)
                WHERE postid IN (*);

MySQL Error  : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '*)' at line 5
Error Number  : 1064
Request Date  : Thursday, July 21st 2016 @ 08:57:35 AM
Error Date    : Thursday, July 21st 2016 @ 08:57:35 AM
Script        : http://xxxxxxx.com/forumrunner/request.php?d=1&cmd=get_spam_data&postids=*
Referrer      : https://xxxxxxxx.com/forumrunner/request.php?d=1&cmd=get_spam_data&postids=*
IP Address    : 1xx.xx.1xx.2xx
Username      : Unregistered
Classname    : XC_xxxxxx_MySQLi
MySQL Version :


ForceHSS 07-22-2016 08:09 AM

Quote:

Originally Posted by tanzeelniazi (Post 2573619)
my forum is safe from other methods but now i get 1 more error
yesterday i delete forumrunner directory but today 1 more error is coming

Code:

Database error in vBulletin 4.2.0:

Invalid SQL:

                SELECT post.postid, post.threadid, post.visible, post.title, post.userid,
                        thread.forumid, thread.title AS thread_title, thread.postuserid, thread.visible AS thread_visible, thread.firstpostid
                FROM post AS post
                LEFT JOIN thread AS thread USING (threadid)
                WHERE postid IN (*);

MySQL Error  : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '*)' at line 5
Error Number  : 1064
Request Date  : Thursday, July 21st 2016 @ 08:57:35 AM
Error Date    : Thursday, July 21st 2016 @ 08:57:35 AM
Script        : http://xxxxxxx.com/forumrunner/request.php?d=1&cmd=get_spam_data&postids=*
Referrer      : https://xxxxxxxx.com/forumrunner/request.php?d=1&cmd=get_spam_data&postids=*
IP Address    : 1xx.xx.1xx.2xx
Username      : Unregistered
Classname    : XC_xxxxxx_MySQLi
MySQL Version :


Make sure you also delete all files that belong to forum runner that are still in your ftp

tanzeelniazi 07-22-2016 08:44 AM

I just delete forumrunner folder from cpanel, i think its the only 1 folder name is forumrunner so already delete

RichieBoy67 07-22-2016 12:25 PM

Did you uninstall the plug in before removing the files?

tanzeelniazi 07-23-2016 06:04 AM

No i just disable after remove forumrunner folder, its mean first i uninstall then remove ?


All times are GMT. The time now is 12:04 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01154 seconds
  • Memory Usage 1,743KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (2)bbcode_code_printable
  • (3)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (2)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete