vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB3 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=111)
-   -   spamer help needed (https://vborg.vbsupport.ru/showthread.php?t=253439)

mastertek2000 11-10-2010 09:14 AM

spamer help needed
 
1 Attachment(s)
every time i try to make a post in my site only i get this

https://vborg.vbsupport.ru/attachmen...0&d=1289387652

Outbackmark 11-10-2010 09:44 AM

This is more than just a spammer, for that to happen something has been done to one or more of your php files.
I would suggest you upoad new newreply.php and newthread.php as I can't think how this could happen without those files having been changed. I stand to be corrected, but it would not hurt to do this, before you upload the new files, change the name of the old ones, just put a .old on the end so you can edit and reuse them if needed.
You should also change passwords to the CPanel and other FTP accounts, also run the VB Diagnostics/Suspect File Versions to ensure there are no other files that should not be there.

mastertek2000 11-10-2010 09:55 AM

that did not work any other ideas thanks for your help

Outbackmark 11-10-2010 10:09 AM

OK the only other way it could be happening is by using the hook system, if you disable the hooks in the config.php file (in the includes directory), or via the Options Menu/Plugin Hook System and see if that helps.

mastertek2000 11-10-2010 10:17 AM

i cant find that where is it

Outbackmark 11-10-2010 10:24 AM

In the Admin CP, go to "VB Options", scroll down to "Plugin/Hook System" and turn it off.

mastertek2000 11-10-2010 10:48 AM

That did not work either

Outbackmark 11-10-2010 10:53 AM

OK it's got me then, no more immediate ideas, hopefully Lynne or Paul will be along soon, wish I could help more!

mastertek2000 11-10-2010 10:56 AM

Thanks for taking your time to try to help me

kh99 11-10-2010 02:07 PM

I'm not an expert on site hacking (if that's what's going on), but there could be something in a template like an image or link to some file on that site. I think I'd use something to see what the request is for, like FireFox with the TamperData add-on (or maybe someone else knows of an alternative). Then if you can figure out what's being requested from that site, you can search around to figure out where it's coming from. (It looks like your forum is closed or else I would have tried it myself).

mastertek2000 11-10-2010 03:13 PM

forum is open now but now seam to be working fine thank you for your advice

kh99 11-10-2010 04:32 PM

I think it's still requesting something from that site but apparently they removed the password. It looks like it has something to do with the "Wrap [PDF] tags around selected text" thing that you have in your message editor. (of course if that's something you know about then it's probably OK).

mastertek2000 11-10-2010 08:41 PM

Quote:

Originally Posted by kh99 (Post 2120276)
I think it's still requesting something from that site but apparently they removed the password. It looks like it has something to do with the "Wrap [PDF] tags around selected text" thing that you have in your message editor. (of course if that's something you know about then it's probably OK).

thanks for taking the time to help me i did remove the pdf tags checked everything seams normal now not sure will post if i find something


All times are GMT. The time now is 04:53 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01276 seconds
  • Memory Usage 1,731KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (13)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete