vb.org Archive - FORUMHOME hacked

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vB3 Programming Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=15)

- - FORUMHOME hacked (https://vborg.vbsupport.ru/showthread.php?t=166683)

djheart

01-02-2008 12:22 AM

FORUMHOME hacked

Hey,

I got my FORUMHOME templated hacked and edited to redirect people to another site written in it "this site is hacked by blah"

ps: HTML is disabled & all redirect codes already added to the banned words list.

What shall i do? this is the 3rd time it get hacked in the same week, in each time i solve it by removing the style and re upload it again..
My version is the latest. 3.6.8 patch 2

any ideas?

SEOvB

01-02-2008 12:28 AM

You need to find out how they are hacking you.

Are you running the latest version of vBulletin? What modifications are you using? Are you on a shared or dedicated host?

djheart

01-02-2008 12:45 AM

I already mentioned the vb version.. its the latest..

And the hacks:

File Uploader (limited to only members and they can only upload pics, else is disabled)
Online members within last 24hrs.
Last threads marquee
Limited guest viewing
Forum stats (on footer)

Paul M

01-02-2008 12:57 AM

Which mod exactly is "Forum Stats on footer" ?

valdet

01-02-2008 03:16 AM

Quote:

Originally Posted by djheart (Post 1413543)

Does your File uploader checks for proper file extension? Cause many times hackers would add a .jpg extension to their their malicious files i.e. evil.php.jpg

Try to disable all those mods and see if problem occurs again.
Regards.
Val

alexgeek

01-02-2008 08:50 PM

Can you link me to the site? I'll see what type of redirect is happening.

All times are GMT. The time now is 02:45 PM.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01095 seconds Memory Usage 1,719KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_navbar_search (1)printthread (6)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: