vb.org Archive - Forum hacked

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vB3 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=111)

- - Forum hacked (https://vborg.vbsupport.ru/showthread.php?t=219324)

lazor

07-24-2009 06:42 AM

Forum hacked

Ok, so my 3.8.2 Vbulletin forum was hacked and now whenever you view the forum home it redirects to a shock site. I updated to 3.8.3 hoping that would fix the problem, but it didn't. It doesn't matter what style I use, either.
Products(all are disabled right now):
Cyb - Advanced Forum Rules 3.9.2
Cyb - Login To User Account 2.2
Cyb - PayPal Donate 4.8.2
DownloadsII 5.1.0
Social Groups on Forumhome 1.3.1 T
emplate Modification System 1.1.5
vB Ad Management 5.02
v vBadvanced CMPS 3.2.1
vBExperience 3.8.2
[AJAX] Tabbed Personal Statistics (YUI) 1.5

toonysnn

07-24-2009 06:50 AM

You've probably got a .htaccess rule in place. (Well not you, but you know what I mean)

lazor

07-24-2009 06:52 AM

It's not .htaccess
It takes a couple seconds to redirect, and it only happens on the forum home.

toonysnn

07-24-2009 06:57 AM

To debug this, in config.php add under <?php

PHP Code:


		
			
define("DISABLE_HOOKS", true);

If this fixes the problem, remove this and disable your plugins one by one to find the security flaw.

If it is yet to be fixed, you'll need to do a check on the plugins created under the product, "vBulletin." Sometimes some users' will try to create a plugin here.

Check the template "FORUMHOME" as well.

notrious

07-24-2009 07:16 AM

Revert your forum home templates ....

lazor

07-24-2009 07:25 AM

Problem solved. It was a jvascript injection, had to create some replacement variables.

All times are GMT. The time now is 01:01 PM.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01053 seconds Memory Usage 1,716KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)bbcode_php_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_navbar_search (1)printthread (6)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: