Question, One of my members noticed something very weird in my [AJAX] Websites who have referred today (in the last 24 hours) box below our forums, you will notice very large text. Yes they were links. No, to my knowledge no-one clicked them. I also went into my admincp to see if any of my admins did this, I saw nothing regarding this in our logs. Can you tell me what would cause this to happen & what I can do to prevent it from happening again? I have [AJAX] Websites who have referred today (in the last 24 hours) dis-abled for now pending comments here. Thanks, Tim

http://outerzone.us/images/yyyyyyyy.bmp



Note, This Particular Site is vb3.6.5

Ah, the screenshot makes all the difference, thank you. This looks to me like Referer spoofing. Since the modification looks at the page the visitor came from and adds it to the database, if the visitor fakes that information then whatever they change it to will be added just the same.

They could also do it (if you have the "Use page titles" option enabled) by creating a webpage with the title "Hello, you've just been hacked" and adding a link to your forum in the page. When they click on the link, the modification will read the "Hello, you've just been hacked" title and add it.

It isn't hacking, its just a slightly crummy trick. I may add one or two tests to try and guess if a referrer is genuine but its not possible to be 100% sure and its not possible to check with page titles at all. If the blocklist isn't functioning properly then I'll try and fix that, because that is the best way to deal with it. Otherwise, just delete them. No harm done.

Thanks for update... I love this and keeps me alert...

Thank you for the info...

I can't delete individuals or all of them, why?

Look at my SS above , you will see remove all referals just above the box.

Nope, i don't see the [X] no where.

The group admin need to be primary group or secondary?

EDIT//

Yep, if the Admin group is secondary on a user, he can't remove referrals, fix?

Same here. I even tried to mess with the code.

PROBLEM IS THAT WEBSITE REFERR DOSENT HAVE A BOX OF ITS OWN PLEASE SEE LINK AND PIC TO BETTER UNDERSTAND WHAT I MEAN..THANKS FOR UR HELP
http://tinypic.com/view.php?pic=67d2urt&s=1

https://vborg.vbsupport.ru/external/2007/11/43.jpg

I get the following error on my page: