This is a tool intended to fixed defaced websites, not revert your templatest to the stock vBulletin templates. Read the description.

What I asked was WILL it still allow you to revert if were to choose to as you can now or does it affect that function.

What it does:
Checks all of the templates in the database;
- Makes a new parsed version from the unparsed template.
- Compares the current parsed template to the new parsed template
- If they differ it updates the template, then rebuilds all of the styles.


It does not do anything strange or funky, it does not effect the revert function in the least.

I love it. Thanks for the reply. Consider it installed.

thank for this mod

my site infect today and just remove it

i donlt know how they put ifram in my site..
i host my private server.

Thanks for this mod. It worked for me a treat. :up:

But I am having to use it every day!! What can i do to stop the ba$tards messing with my templates.

Contact your webhost.

Does it work with 4.0?

Did I hear correctly, if I rebuild styles correctly it won't do anything?

I run it for awhile and then I get an error.

as a webhost how we can edit it to do the fix without the need for the admin user/pass ? so we don't need to ask each user for his admin user/pass as i noticed few forums got infected on one of the servers

Thanks

anyone?

Here's a version that doesn't require admin privileges to run.

As for the unrelated question of whether it works on 4.0 - probably. I looked at how vB4 compiles templates and it is the same function call. I don't guarantee that something bad won't happen, but it'll probably work just as smoothly as it does on vB3. Maybe.

still asks for login

Put it in the forum root directory instead of the admincp directory. Sorry, I forgot to mention that.

thanks a bunch!

Does it cause any troubles using the TMS (template modification system)?

It shouldn't, but a link to the product would help

This one from Andreas: https://vborg.vbsupport.ru/showthread.php?t=152931

cu
Gargi

I would say backup first. but this is intended to fix defaced sites.

Can you please make it work on vbulletin 4.02 or give me some alternative?

true it doesn't work with 4.0.2 anymore

can anyone make it works for 4.0.2 ?

Unfortunately, it still doesn't work with me, whenever I try to browse it and run it, I got the hacked pages, so it seems to me the hacked pages would show up in all the files for the forum, like if it would be a header or something like that.

Please advise,

Thank you,

any ideas if this will work with 3.6.12 PL2?

any chance this would work on v3.5x?

sorry, nm

How would you make this work on a cron job
Basically set and forget.
Let it run once or twice a day
Thanks in advance for any help

for some reason this doesn't work anymore even on 3.6.x or 3.8.x it still shows the hacked page

any idea what might be the reason?

they didn't hack your templates.

Check your plugins Bashar, Zachery has a point ;).

hmm, which plungins? thing is all pages loads the hacked page, i checked the files they are intact, i restored older DB forum(s) worked

different forums installations different plugins

i even tried to dump the db and grep into the sql file for a word but since its encrypted JS no results matched

any other hints?

thanks :)

Unfortunately it doesn't work under vB 4.1.10, but I really need this a s my forum was compromised. I have since closed the hole (I hope), but the bad templates are still in there I believe

Is there any way to get this to work, and if not, how can I manually reparse the templates?

Any help wold be greatly appreciated, thanks.

Are you positive its in the templates?

Is there a 4.1.x version of this?
I found this thread via theadminzone
http://www.theadminzone.com/forums/s...2&postcount=81
and want to make sure a client is secure.

Thanks

I think for this to work in vb4 you just need to take the "false" parameter off the compile_template line so it looks like this:

I'm not 100% sure, but I believe this may be what happened:

https://www.vbulletin.com/forum/show...=1#post2185387

Both my forums were compromised at the same time, and even after I had plugged the hole this mod continued to send blank emails to me for several days (which according the the author means it found an infection but missed some phrases). It has stopped now though, but does that mean the templates are "clean"?

This may also be what happened (or both), but how to tell? I'd rather be safe than sorry

Thanks a lot!

I'll try this if/when I can muster the courage to run the untested code on my forums :)

That's fair. I did run it on a test forum and it runs without errors, recompiled a template where I had gone in to the db and changed the compiled string, and didn't seem to have any other effects. But personally I don't think I'd even run the original version unless I suspected a problem.

I see, thanks for testing it. I think what I'll do is run it right after the daily backup of my server, that way if something goes wrong It'll be at most a few hours I lose.

When I try running this file (vb4) I get a blank page. Funny thing is it seemed to work the first time I ran it but got "hung" on a particular template. Now everytime I try to run it i just get a blank page. Any thoughts?

I'm getting a 500 error when I try to run this on my vb4 forum (after changing the parameter as discussed above).